Enhanced curfew and protection associated with a device group

ABSTRACT

A method comprising obtaining, from a master user, a device usage allocation applicable to two or more devices, the two or more devices being associated with another user, the another user being different from the master user, obtaining an aggregate measure of device usage associated with the two or more devices, if the aggregate measure of device usage associated with the two or more devices satisfies a condition relative to the device usage allocation, managing an activity of the two or more devices, and sending a notification to at least one of the two or more devices, the notification for presentation to the another user through a user interface of the at least one of the two or more devices.

CROSS REFERENCE TO OTHER APPLICATIONS

This application is a continuation-in-part of co-pending U.S.nonprovisional application Ser. No. 13/748,152, filed Jan. 23, 2013,entitled SERVICE PLAN DESIGN, USER INTERFACES, APPLICATION PROGRAMMINGINTERFACES, AND DEVICE MANAGEMENT (UI), which is a continuation-in-partof the following U.S. nonprovisional application Ser. No. 13/441,821,filed Apr. 6, 2012, entitled MANAGING SERVICE USER DISCOVERY AND SERVICELAUNCH OBJECT PLACEMENT ON A DEVICE; Ser. No. 12/380,780, filed Mar. 2,2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; Ser. No.12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES, nowU.S. Pat. No. 8,406,748 (issued Mar. 26, 2013); Ser. No. 13/134,028,filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTINGNETWORK CAPACITY, now U.S. Pat. No. 8,589,541 (issued Nov. 19, 2013);Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORKSERVICE INTERFACES, now U.S. Pat. No. 8,626,115 (issued Jan. 7, 2014);Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SETPUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; Ser. No.13/309,556, filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES ANASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATIONCERTIFICATE CHECK; and Ser. No. 13/374,959, filed Jan. 24, 2012,entitled FLOW TAGGING FOR SERVICE POLICY IMPLEMENTATION, now U.S. Pat.No. 8,606,911 (issued Dec. 10, 2013).

This application claims the benefit of the following U.S. provisionalapplications: 61/765,978, filed Feb. 18, 2013, entitled ENHANCED CURFEWAND PROTECTION ASSOCIATED WITH A DEVICE GROUP; 61/785,988, filed Mar.14, 2013, entitled AUTOMATED CREDENTIAL PORTING FOR MOBILE DEVICES;61/794,116, filed Mar. 15, 2013, entitled ENHANCED INTERMEDIATENETWORKING DEVICE; 61/792,765, filed Mar. 15, 2013, entitled DEVICEGROUP AND SERVICE PLAN MANAGEMENT; 61/793,894, filed Mar. 15, 2013,entitled SIMPLIFIED POLICY DESIGN, MANAGEMENT, AND IMPLEMENTATION;61/799,710, filed Mar. 15, 2013, entitled AMBIENT OR SPONSORED SERVICES;and 61/801,074, filed Mar. 15, 2013, entitled DEVICE GROUP AND SERVICEPLAN MANAGEMENT.

All of the above-referenced patents, nonprovisional applications, andprovisional applications are hereby incorporated by reference for allpurposes.

This application also incorporates by reference for all purposes thefollowing United States nonprovisional applications: U.S. applicationSer. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDRCREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No.8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/694,445,filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTEDSERVICES, now U.S. Pat. No. 8,391,834 (issued Mar. 5, 2013); U.S.application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICEGROUP PARTITIONS AND SETTLEMENT PLATFORM, now U.S. Pat. No. 8,548,428(issued Oct. 1, 2013); U.S. application Ser. No. 12/694,455, filed Jan.27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL, now U.S. Pat. No.8,402,111 (issued Mar. 19, 2013); U.S. application Ser. No. 12/695,021,filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTEDSERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S.application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCEDROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTEDSERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25,2012); U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011,entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSORCONFIGURATION; U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011,entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS; U.S.application Ser. No. 13/248,028, filed Sep. 28, 2011, entitledENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS;U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitledSECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/309,463, filedDec. 1, 2011, entitled SECURITY, FRAUD DETECTION, AND FRAUD MITIGATIONIN DEVICE-ASSISTED SERVICES SYSTEMS; U.S. application Ser. No.13/248,025, filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FORDEVICE ASSISTED SERVICES; U.S. application Ser. No. 13/134,005, filedMay 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORKOFFLOADING; U.S. application Ser. No. 13/802,483, filed Mar. 13, 2013,entitled MOBILE DEVICE ACTIVATION VIA DYNAMICALLY SELECTED ACCESSNETWORK; and U.S. application Ser. No. 13/842,172, filed Mar. 15, 2013,entitled NETWORK SERVICE PLAN DESIGN.

This document also incorporates by reference for all purposes thefollowing provisional patent applications: U.S. Provisional ApplicationNo. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICYCOMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No.61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATIONSYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filedFeb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD;and U.S. Provisional Application No. 61/207,739, entitled SERVICESPOLICY COMMUNICATION SYSTEM AND METHOD, filed Feb. 13, 2009; U.S.Provisional Application No. 61/270,353, filed on Jul. 6, 2009, entitledDEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING; U.S.Provisional Application No. 61/275,208, filed Aug. 25, 2009, entitledADAPTIVE AMBIENT SERVICES; and U.S. Provisional Application No.61/237,753, filed Aug. 28, 2009, entitled ADAPTIVE AMBIENT SERVICES;U.S. Provisional Application No. 61/252,151, filed Oct. 15, 2009,entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S.Provisional Application No. 61/252,153, filed Oct. 15, 2009, entitledDEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. ProvisionalApplication No. 61/264,120, filed Nov. 24, 2009, entitled DEVICEASSISTED SERVICES INSTALL; U.S. Provisional Application No. 61/264,126,filed Nov. 24, 2009, entitled DEVICE ASSISTED SERVICES ACTIVITY MAP;U.S. Provisional Application No. 61/348,022, filed May 25, 2010,entitled DEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S.Provisional Application No. 61/381,159, filed Sep. 9, 2010, entitledDEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S.Provisional Application No. 61/381,162, filed Sep. 9, 2010, entitledSERVICE CONTROLLER INTERFACES AND WORKFLOWS; U.S. ProvisionalApplication No. 61/384,456, filed Sep. 20, 2010, entitled SECURINGSERVICE PROCESSOR WITH SPONSORED SIMS; U.S. Provisional Application No.61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICEASSISTED SERVICES; U.S. Provisional Application No. 61/385,020, filedSep. 21, 2010, entitled SERVICE USAGE RECONCILIATION SYSTEM OVERVIEW;U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010,entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESSCOMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. ProvisionalApplication No. 61/387,247, filed September 28, entitled SECURED DEVICEDATA RECORDS, 2010; U.S. Provisional Application No. 61/407,358, filedOct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSORARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1,2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S.Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitledSERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICEASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filedDec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. ProvisionalApplication No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGNCENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No.61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES ANDWORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No.61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTIONFOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No.61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTEDSERVICES; U.S. Provisional Application No. 61/472,606, filed Apr. 6,2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECTPLACEMENT ON A DEVICE; U.S. Provisional Application No. 61/550,906,filed Oct. 24, 2011, entitled SECURITY FOR DEVICE-ASSISTED SERVICES;U.S. Provisional Application No. 61/589,830, filed Jan. 23, 2012,entitled METHODS AND APPARATUS TO PRESENT INFORMATION ABOUT VOICE,MESSAGING, AND DATA SERVICES ON WIRELESS MOBILE DEVICES; U.S.Provisional Application No. 61/610,876, filed Mar. 14, 2012, entitledMETHODS AND APPARATUS FOR APPLICATION PROMOTION AND SPONSORSHIP; U.S.Provisional Application No. 61/610,910, filed Mar. 14, 2012, entitledWIFI ACTIVATION BACKUP PROCESS; U.S. Provisional Application No.61/658,339, filed Jun. 11, 2012, entitled MULTI-DEVICE MASTER SERVICESACCOUNTS, SERVICE PLAN SHARING AND ASSIGNMENTS, AND DEVICE MANAGEMENTFROM A MASTER DEVICE; U.S. Provisional Application No. 61/667,927, filedJul. 3, 2012, entitled FLEXIBLE MULTI-DEVICE MASTER SERVICE ACCOUNTS,SERVICE PLAN SHARING AND ASSIGNMENTS, AND DEVICE MANAGEMENT; U.S.Provisional Application No. 61/674,331, filed Jul. 21, 2012, entitledSERVICE CONTROLLER FOR MANAGING CLOUD-BASED POLICY; U.S. ProvisionalApplication No. 61/724,267, filed Nov. 8, 2012, entitled FLEXIBLESERVICE PLAN DESIGN, USER INTERFACE AND DEVICE MANAGEMENT; U.S.Provisional Application No. 61/724,837, filed Nov. 9, 2012, entitledSERVICE PLAN DISCOVERY, CUSTOMIZATION, AND MANAGEMENT; U.S. ProvisionalApplication No. 61/724,974, filed Nov. 10, 2012, entitled SERVICE PLANDISCOVERY, CUSTOMIZATION, AND MANAGEMENT; U.S. Provisional ApplicationNo. 61/732,249, filed Nov. 30, 2012, entitled APPLICATION PROGRAMMINGINTERFACES FOR SMART SERVICES; U.S. Provisional Application No.61/734,288, filed Dec. 6, 2012, entitled INTERMEDIATE NETWORKING DEVICESERVICES; and U.S. Provisional Application No. 61/745,548, filed Dec.22, 2012, entitled SERVICE PLAN DESIGN, USER INTERFACES, APPLICATIONPROGRAMMING INTERFACES, AND DEVICE MANAGEMENT; U.S. ProvisionalApplication No. 61/756,332, filed Jan. 24, 2013, entitled MOBILEHOTSPOT; and U.S. Provisional Application No. 61/758,964, filed Jan. 30,2013, entitled MOBILE HOTSPOT.

BRIEF DESCRIPTION OF THE DRAWINGS

Various embodiments of the invention are disclosed in the followingdetailed description and the accompanying drawings.

FIG. 1 illustrates a representative system of interconnected networkelements communicatively coupled to a mobile wireless communicationdevice in accordance with some embodiments.

FIG. 2 illustrates a representative screen for a mobile wirelesscommunication device that is not yet associated with a master serviceaccount in accordance with some embodiments.

FIG. 3 illustrates a representative screen providing a choice between aprepay account and a post-pay account in accordance with someembodiments.

FIG. 4 illustrates a representative “Home” screen on the mobile wirelesscommunication device in accordance with some embodiments.

FIG. 5 illustrates a representative screen prompting for a passwordassociated with a master service account in accordance with someembodiments.

FIG. 6 illustrates a representative screen providing access to accountinformation in accordance with some embodiments.

FIG. 7 illustrates a representative screen for entering paymentinformation associated with an account in accordance with someembodiments.

FIG. 8 illustrates a representative screen summarizing paymentinformation associated with an account in accordance with someembodiments.

FIG. 9 illustrates a representative screen providing options forreplenishing an account balance in accordance with some embodiments.

FIG. 10 illustrates a representative screen providing options forreplenishing an account balance in accordance with some embodiments.

FIG. 11 illustrates a representative screen summarizing information formobile wireless communication devices in accordance with someembodiments.

FIG. 12 illustrates a representative screen displayed for a child devicethat is not associated with an account in accordance with someembodiments.

FIG. 13 illustrates a representative screen for associating a childdevice with an account in accordance with some embodiments.

FIGS. 14 and 15 illustrate a representative screen providing forentering information to associate a child device with an account inaccordance with some embodiments.

FIGS. 16 and 17 illustrate representative screens displaying informationfollowing successful association of a child device with an account inaccordance with some embodiments.

FIG. 18 illustrates a representative screen displaying devicesassociated with a master service account in accordance with someembodiments.

FIG. 19 illustrates a representative screen for selecting devicepermissions in accordance with some embodiments.

FIG. 20 illustrates a representative screen presenting an example of aservice plan subscribed to by the user of the mobile wirelesscommunication device in accordance with some embodiments.

FIG. 21 illustrates a representative screen for sharing voice serviceplans of the mobile wireless communication device in accordance withsome embodiments.

FIG. 22 illustrates a representative screen providing account usagedetails for a specific voice service plan of the mobile wirelesscommunication device in accordance with some embodiments.

FIG. 23 illustrates a representative screen presenting an example ofplan sharing options available to the user of the mobile wirelesscommunication device in accordance with some embodiments.

FIG. 24 illustrates a representative screen displaying full sharing of avoice service plan by two mobile wireless communication devices inaccordance with some embodiments.

FIG. 25 illustrates a representative screen displaying a voice serviceplan allocated entirely to one of two mobile wireless communicationdevices in accordance with some embodiments.

FIG. 26 illustrates a representative screen displaying a voice serviceallocated differently to each of two mobile wireless communicationdevices in accordance with some embodiments.

FIG. 27 illustrates a representative screen displaying account usagedetails for a voice service plan shared by two mobile wirelesscommunication devices in accordance with some embodiments.

FIG. 28 illustrates a representative screen displaying service plansharing for a set of data service plans for two mobile wirelesscommunication devices in accordance with some embodiments.

FIGS. 29 and 30 illustrate representative screens displaying sharing ofa specific service plan among two mobile wireless communication devicesin accordance with some embodiments.

FIG. 31 illustrates a representative screen displaying service usagedetails arranged by application for a shared service plan in accordancewith some embodiments.

FIG. 32 illustrates a representative screen displaying service usagedetails arranged by network end-point for a shared service plan inaccordance with some embodiments.

FIG. 33 illustrates a representative screen displaying service usagedetails arranged by time of day categories for a shared service plan inaccordance with some embodiments.

FIG. 34 illustrates a representative screen displaying service usagedetails arranged by network type for a shared service plan in accordancewith some embodiments.

FIG. 35 illustrates a representative screen displaying service usagedetails arranged by a quality of service (QoS) level for a sharedservice plan in accordance with some embodiments.

FIG. 36 illustrates a representative screen displaying an option toassign a service plan to a mobile wireless communication device inaccordance with some embodiments.

FIG. 37 illustrates a representative screen displaying selection optionsfor assigning a service plan to one of two mobile wireless communicationdevices in accordance with some embodiments.

FIG. 38 illustrates a representative screen displaying plan sharingproperties of multiple service plans across multiple mobile wirelesscommunication devices in accordance with some embodiments.

FIG. 39 illustrates a representative screen displaying an option toassign an already assigned service plan in accordance with someembodiments.

FIG. 40 illustrates a representative screen displaying tracking ofservice usage of a child device in accordance with some embodiments.

FIG. 41 illustrates a representative screen displaying service usage fordifferent service plan categories in accordance with some embodiments.

FIG. 42 illustrates another representative screen displaying serviceusage for different service plan categories in accordance with someembodiments.

FIG. 43 illustrates a representative screen displaying service usage formultiple service plans and multiple mobile wireless communicationdevices during a particular time period in accordance with someembodiments.

FIG. 44 illustrates a representative screen displaying service plantransactions and balances in accordance with some embodiments.

FIG. 45 illustrates a representative system configuration providing fora master-subscriber-initiated or a secondary-subscriber-initiatedon-device multi-device service sign-up procedure in accordance with someembodiments.

FIG. 46 illustrates a representative flow chart illustrating exchangeand processing of messages to add a secondary device to a master serviceaccount, device group, or multi-device service plan initiated by amaster device subscriber in accordance with some embodiments.

FIG. 47 illustrates a representative flow chart illustrating exchangeand processing of messages to add a secondary device to a master serviceaccount, device group, or multi-device service plan initiated by asecondary device subscriber in accordance with some embodiments.

FIG. 48 illustrates a representative system configuration providing foradding a secondary device to a master service account, device group, ormulti-device service plan without the use or involvement of a masterdevice in accordance with some embodiments.

FIG. 49 illustrates a representative flow chart illustrating exchangeand processing of messages to add a secondary device to a master serviceaccount, device group, or multi-device service plan initiated by asecondary device subscriber in accordance with some embodiments.

FIG. 50 illustrates a representative system configuration providing foradding a secondary device to a master service account, device group, ormulti-device service plan entirely from a master device in accordancewith some embodiments.

FIG. 51 illustrates a representative flow chart illustrating exchangeand processing of messages to add a secondary device to a master serviceaccount, device group, or multi-device service plan initiated by themaster device in accordance with some embodiments.

FIG. 52 illustrates a representative system configuration for serviceplan management for multiple mobile wireless communication devices inaccordance with some embodiments.

FIG. 53 illustrates a representative system configuration for serviceplan management for multiple mobile wireless communication devices andmultiple service operators through a common application programminginterface (API) in accordance with some embodiments.

FIG. 54 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a curfew of one ormore devices in accordance with some embodiments.

FIG. 55 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a curfew with timeevents of one or more devices in accordance with some embodiments.

FIG. 56 illustrates a representative screen that is presented on adevice to a master user when a master user attempts to manage a curfewof one or more users associated with one or more devices from a devicegroup in accordance with some embodiments.

FIG. 57 illustrates a representative screen that is presented on adevice to a master user when the master user attempts to manage a curfewof a first set of one or more devices from a device group and one ormore users associated with a second set of one or more devices from adevice group in accordance with some embodiments.

FIG. 58 illustrates a representative screen that is presented on adevice to a master user when the master user attempts to manage a curfewof one or more users associated with one or more devices from a devicegroup in accordance with some embodiments.

FIG. 59 illustrates a representative screen that is presented on adevice to a master user when the master user attempts to manage a curfewwith time events of a first set of one or more devices from a devicegroup and one or more users associated with a second set of one or moredevices from the device group in accordance with some embodiments.

FIG. 60 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a “Dinner” curfewselection in accordance with some embodiments.

FIG. 61 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a “Sleeping” curfewselection in accordance with some embodiments.

FIG. 62 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a “Homework” curfewselection in accordance with some embodiments.

FIG. 63 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a “Homework ongoingactivity termination details” curfew selection in accordance with someembodiments.

FIG. 64 illustrates a representative screen that is presented on amaster device when a subscriber attempts to define a custom curfew modein accordance with some embodiments.

FIG. 65 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage advanced customsettings in accordance with some embodiments.

FIG. 66 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage notification settingsin accordance with some embodiments.

FIG. 67 illustrates a representative screen with notificationinformation that is presented on a child device in accordance with someembodiments.

FIG. 68 illustrates a representative screen with notificationinformation that is presented on a child device after a master user asinitiated or changed a curfew mode to manage notification settings forongoing activities in accordance with some embodiments.

FIG. 69 illustrates a representative screen with notificationinformation that is presented on a child device after a master user hasinitiated or changed a curfew mode to provide a user a notificationoption to accept or request an extension of a real-time curfew inaccordance with some embodiments.

FIG. 70 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a protection settingof one or more devices and one or more users in accordance with someembodiments.

FIG. 71 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage a “PG 7” protectionselection in accordance with some embodiments.

FIG. 72 illustrates a representative screen that is presented on amaster device when a subscriber attempts to manage the protection of a“Browsing” activity within a “PG 7” protection selection in accordancewith some embodiments.

FIG. 73 illustrates a representative initial opening “start up” screenthat provides for associating a device with a service account inaccordance with some embodiments.

FIG. 74 illustrates a representative screen to enter information for anemail account and an account password in accordance with someembodiments.

FIG. 75 illustrates a representative screen to enter information for anemail account and an account password after a user has input informationin accordance with some embodiments.

FIG. 76 illustrates another representative screen to enter informationfor a new service account in accordance with some embodiments.

FIG. 77 illustrates a representative screen to enter information for oneor more security questions associated with the service account, the userof the device, and/or the service account owner in accordance with someembodiments.

FIG. 78 illustrates a representative screen for selecting a recurringservice plan for the device in accordance with some embodiments.

FIG. 79 illustrates a representative screen to review a recurringservice plan selection of the user of the device, the recurring serviceplan selected from the array of service plans presented to the user ofthe device in accordance with some embodiments.

FIG. 80 illustrates a representative screen to enter payment informationassociated with a user, a service account, a service account owner, adevice, a device group, or a user group in accordance with someembodiments.

FIG. 81 illustrates a representative screen that confirms a service planselection (and/or customization) and a payment selection for a serviceplan in accordance with some embodiments.

FIG. 82 illustrates a representative screen that informs the user of thedevice when at least a portion of an initialization process for thedevice is in progress in accordance with some embodiments.

FIG. 83 illustrates a representative screen through which a user of adevice specifies a reference identifier (nickname) for the device inaccordance with some embodiments.

FIG. 84 illustrates a representative screen to select a device phonenumber for a device in accordance with some embodiments.

FIG. 85 illustrates a representative screen to enter information to joina device to an existing service account in accordance with someembodiments.

FIG. 86 illustrates another representative screen to enter informationto join a device to an existing service account, including an overlaykeyboard through which to enter the requested information in accordancewith some embodiments.

FIGS. 87 and 88 illustrate representative screens to indicate progressof a process to join a device to an existing service account inaccordance with some embodiments.

FIGS. 89 through 93 illustrate representative screens to indicateprogress of a process to prepare a device for use with a wirelessnetwork in accordance with some embodiments.

FIG. 94 illustrates a representative “home” screen for a device inaccordance with some embodiments.

FIG. 95 illustrates a representative screen that provides information toa user of a device to assist in learning how to use the device userinterface in accordance with some embodiments.

FIG. 96 illustrates a representative screen through which a user of adevice reviews profile information for a user (and/or an administrator)of the device in accordance with some embodiments.

FIG. 97 illustrates a representative screen to provide a listing ofpayment forms associated with a device, user, and/or service account inaccordance with some embodiments.

FIG. 98 illustrates a representative screen to summarize invoicesprovided for a device, user, and/or service account in accordance withsome embodiments.

FIG. 99 illustrates a representative screen including detailedinformation for a selected invoice in accordance with some embodiments.

FIG. 100 illustrates a representative screen to add an accountassociated with an “outside” vendor to the device in accordance withsome embodiments.

FIGS. 101 and 102 illustrate representative screens for updating and/ormodifying information for payment forms associated with a serviceaccount and service account profile information in accordance with someembodiments.

FIG. 103 illustrates a representative screen to review and manageservice plans associated with the device in accordance with someembodiments.

FIG. 104 illustrates a representative screen to select a recurringservice plan from an array of service plans in accordance with someembodiments.

FIG. 105 illustrates a representative screen through which a user of adevice customizes a service plan in accordance with some embodiments.

FIGS. 106 and 107 illustrate representative screens to confirm changesfor a customized service plan in accordance with some embodiments.

FIG. 108 illustrates a representative screen that summarizes informationfor a service plan in accordance with some embodiments.

FIG. 109 illustrates a representative screen that provides additionaldetailed information for a service plan element of a service plan inaccordance with some embodiments.

FIGS. 110 and 111 illustrate representative screens that providesummarized information for a service plan and/or element of a serviceplan in accordance with some embodiments.

FIG. 112 illustrates a representative screen that provides summarizedservice usage for a service plan for a particular time period inaccordance with some embodiments.

FIG. 113 illustrates a representative screen summarizing a set ofapplications available for use on the device in accordance with someembodiments.

FIG. 114 illustrates a representative screen for which a service plan ofa service account is shared by a device in accordance with someembodiments.

FIG. 115 illustrates a representative screen that presents a set of“featured” service plans for review, selection, and/or purchase by auser of a device in accordance with some embodiments.

FIG. 116 illustrates a representative screen that presents summaryinformation for a particular service plan selected from a set offeatured service plans in accordance with some embodiments.

FIG. 117 illustrates a representative overlay screen that presentsseveral options for a service plan in accordance with some embodiments.

FIG. 118 illustrates a representative screen that summarizes a set ofdevices in a device group in accordance with some embodiments.

FIG. 119 illustrates a representative screen that provides detailedinformation for a particular device in accordance with some embodiments.

FIG. 120 illustrates a representative screen that indicates permissionlevels for a particular device in accordance with some embodiments.

FIGS. 121 and 122 illustrate representative screens that summarizeinformation for sharing service plans for a particular device inaccordance with some embodiments.

FIG. 123 illustrates a representative screen that provides informationon service activity controls for a selected device in accordance withsome embodiments.

FIG. 124 illustrates a representative screen for modifying a particularservice activity control for a device or a set of devices in accordancewith some embodiments.

FIGS. 125 through 127 illustrate representative screens for defining ormodifying a service activity control for a device or a set of devices inaccordance with some embodiments.

FIG. 128 illustrates a representative screen for defining exceptionsthat override a service activity control or a set of service activitycontrols in accordance with some embodiments.

FIG. 129 illustrates a representative screen for defining a set ofspecific people to allow as an exception for communication thatoverrides one or more service activity controls in accordance with someembodiments.

FIG. 130 illustrates a representative screen for selecting an individualfrom a contact list to include in a restriction exception list thatoverrides a service activity control in accordance with someembodiments.

FIG. 131 illustrates a representative screen for searching for contactswithin a contact list to define or modify a restriction exception listin accordance with some embodiments.

FIG. 132 illustrates a representative screen in which a particularcontact is selected from the contact list and populated within theallowed list for restriction exceptions in accordance with someembodiments.

FIG. 133 illustrates a representative screen for defining allowedexceptions that include specific individuals in accordance with someembodiments.

FIG. 134 illustrates a representative screen for defining an “allowedexception” list for a service activity control in accordance with someembodiments.

FIG. 135 illustrates a representative screen for selecting a pre-definedtime period for a service activity control in accordance with someembodiments.

FIG. 136 illustrates a representative screen for selecting an initialtime period value or an ending time period value for a service activitycontrol in accordance with some embodiments.

FIGS. 137 and 138 illustrate representative screens for setting ormodifying a service activity control for a device or a set of devices inaccordance with some embodiments.

FIG. 139 illustrates a representative overlay screen that summarizes aservice activity control defined by the administrator in accordance withsome embodiments.

FIG. 140 illustrates a representative screen that displays a list ofservice activity controls for a device in accordance with someembodiments.

FIG. 141 illustrates a representative screen for defining an exceptionto a service activity control in accordance with some embodiments.

FIGS. 142 through 148 illustrate representative screens for transferringa device number from another device to the particular device inaccordance with some embodiments.

FIGS. 149 through 156 illustrate representative screens for presentingtutorial information to a user of the device in accordance with someembodiments.

DETAILED DESCRIPTION

In recent years, mobile wireless communication devices have becomepopular, and many individuals, families, and organizations use or ownmultiple mobile wireless communication devices. As would be appreciatedby a person having ordinary skill in the art, there are many kinds ofmobile wireless communication devices, including, for example, smartphones, tablets, laptops, mobile phones, personal digital assistants,and many others. These mobile wireless communication devices are capableof sending and receiving wireless radio frequency signals over one ormore wireless communication networks, such as cellular (e.g., 2G, 2.5G,3G, 4G, LTE, LTE advanced, etc.) networks, local-area (e.g., Wi-Fi)networks, or other wireless communication networks.

A mobile wireless communication device (hereinafter generally referredto simply as a device) may need to be associated with a service accountin order to allow a user or owner of the device (herein referred to as asubscriber or user) to use the device to communicate over a particularwireless communication network in a manner that is meaningful to thesubscriber (e.g., to access content or a service offered by a serviceprovider). Moreover, the device may need to be associated with one ormore service plans that allow it to access services offered by a serviceprovider. A service plan may, in general, allow for a quantity ofcommunication or a time period of communication (e.g., 100 MB of dataper month, 24 hours of network access, 100 minutes of phone calls,etc.). Some examples of services that may be offered by a serviceprovider include the non-mutually-exclusive categories of voice services(e.g., phone calls, etc.), messaging services (e.g., text messages,multimedia messages, etc.), data services (e.g., Internet access, etc.),and hybrid services (e.g., voice over IP (VOIP), video chat, etc.). Aservice provider may be an operator of a wireless communication network,or may be another entity, such as a mobile virtual network operator(MVNO), a retail partner, a mobile wireless communication deviceoriginal equipment manufacturer (OEM), a mobile wireless communicationdevice operating system (OS) provider or a third-party service partner.There are many other examples of services, service plans, and serviceproviders, and the examples provided herein are not intended to belimiting.

It may also be desirable to associate more than one device with aparticular service account. There are many potential benefits ofassociating multiple devices with a particular service account,including, for example, simplifying billing for the service provider andfor the subscriber, and potentially reducing service costs forsubscribers, e.g., by sharing the particular service account amongmultiple devices. For example, a husband and wife may want to establisha single service account for both of their smart phones. As anotherexample, a parent may want to establish a single service account for theseveral mobile phones used by family members. As another example, anemployer may want to establish a single service account for multiplesmart phones used by one or more of its employees. As another example, aperson may want to establish a single service plan for multiple devicesthat the person uses, such as, for example, one or more of a smartphone, a tablet, a laptop, and an intermediate networking device thatforwards traffic between a local area network and a wireless cellularnetwork. There are many other examples of situations in which it mightbe desirable to associate multiple devices with a single service account(hereinafter referred to as a master service account).

In addition to associating multiple devices with a master serviceaccount, it may be desirable to share a service plan that is associatedwith the master service account among the multiple devices associatedwith the master service account. For example, a parent might want topurchase a single service plan that is shared among all members of thefamily, or an employer might want to purchase a single service plan thatis shared among multiple employees.

Today, subscribers who wish to share a service plan among multipledevices can only do so with several limitations. For example, creating amaster service account and sharing a service plan among multiple devicescan require direct involvement of a service provider, e.g. a serviceprovider customer representative. The service provider associates eachof the devices with a master service account and with a service plan,and the associated devices then share the service plan. Often,subscribers cannot add or delete devices from the master service accountwithout assistance from the service provider. In order to make changesto the master account, subscribers may need to call the service provideror may be required to log in to a web portal (e.g., by logging into awebsite), e.g., through a separate computing system. Another drawback isthat although all of the devices associated with a master serviceaccount share a service plan, there are no controls to prevent aparticular device from “hogging” allocations provided by the serviceplan. Another drawback is that although some service providers todayallow sharing of voice minutes or text message allocations, they may notallow sharing of a data plan, or they may limit sharing of a data plan.Yet another drawback is that today's shared service plans may not allowsubscribers to associate different kinds of devices (e.g., a tablet anda smart phone) with a master service account. As a result of thesedrawbacks, the utility of shared service plans available today islimited.

Disclosed herein are methods, systems, and apparatuses to enablesubscribers of devices to view, research, select and customize serviceplans for one or more devices. Also disclosed herein are methods,systems, and apparatuses that allow subscribers to create and manage agroup of two or more devices (herein referred to as a device group)without service provider involvement. After a subscriber has establisheda master service account, the subscriber can create a device group byassociating additional devices with the established master serviceaccount that is already associated with a master device or with a masteruser (e.g., an administrator at an enterprise or another party who isnot necessarily associated with a master device, but who is associatedwith the master service account). Also disclosed are methods, systems,and apparatuses to enable subscribers to share service plans amongmultiple devices in the device group. Also disclosed are methods,systems, and apparatuses to enable subscribers to fully or partiallyassign a service plan from one device to another device in the devicegroup. Also disclosed are methods, systems, and apparatuses to allowsubscribers to monitor or manage the devices in a device group from oneor more master devices in the device group. Managing includes adding,deleting, or modifying devices or properties of devices, service plans,service accounts, etc. For example, managing includes dictating orchanging a usage limit on one or more services available to devices inthe device group.

As used herein, service activity is used to refer to any service usageor traffic usage that can be associated with, for example, anapplication; a network communication end point, such as an address,uniform resource locator (URL) or other identifier with which the deviceis communicating; a traffic content type; a transaction where content orother material, information or goods are transacted, purchased,reserved, ordered or exchanged; a download, upload or file transfer;email, text, short messaging service (SMS), IP multimedia system (IMS),or other messaging activity or usage; VOIP services; video services; adevice usage event that generates a billing event; service usageassociated with a bill by account activity (also referred to as billingby account) as described herein; device location; device service usagepatterns, device user interface (UI) discovery patterns, content usagepatterns or other characterizations of device usage; or other categoriesof user or device activity that can be identified, monitored, recorded,reported, controlled or processed in accordance with a set of verifiableservice control policies. As will be apparent to one of ordinary skillin the art in view of the embodiments described herein, some embodimentsidentify various service activities for the purpose of decomposingoverall service usage into finer sub-categories of activities that canbe verifiably monitored, categorized, cataloged, reported, controlled,monetized and used for end user notification in a manner that results insuperior optimization of the service capabilities for various levels ofservice cost or for various types of devices or groups. In someembodiments, it will be apparent to one of ordinary skill in the artthat the terms “service activity” and “service usage” are associatedwith categorizing and possibly monitoring or controlling data traffic,application usage, communication with certain network end points, ortransactions, and it will also be apparent that in some embodiments, theterm service activity is intended to include one or more of the broaderaspects listed above. The term service usage can be used interchangeablywith the term service activity, and neither term is intended in generalto exclude any aspect of the other. In some cases, where the termservice usage and/or service activity is used, more specific descriptorssuch as traffic usage, application usage, website usage, and otherservice usage examples are also used to provide more specific examplesor focus in on a particular element of the more encompassing term.

FIG. 1 is a high-level block diagram in accordance with someembodiments. As shown in FIG. 1, in some embodiments, a device agent(e.g., software such as one or more components of service processor 115)is installed on a device 100 and is configured to communicate a requestto add device 100 to a master service account, a device group, or amulti-device (i.e., shareable) service plan or service plan bundle. Insome embodiments, at least an aspect of the request is received from anetwork element, such as service controller 122 of FIG. 1. In someembodiments, the communications between the device agent and the networkelement take place over a secure communications link. In someembodiments, the secure communications link is encrypted by transportlayer security (TLS), a secure socket layer (SSL), or by anothersuitable encryption mechanism or protocol.

In some embodiments, service controller 122 illustrated in FIG. 1 is thesame as Sign-Up Request Processor 9002 shown in FIGS. 45, 48, 50, 52,and 53. In some embodiments, Sign-Up Request Processor 9002 is afunction within service controller 122. In some embodiments, Sign-UpRequest Processor 9002 is co-located with the service controller 122. Insome embodiments, the request to add device 100 to the master serviceaccount, device group, or multi-device service plan is communicated to anetwork element, such as service controller 122 shown in FIG. 1 orSign-Up Request Processor 9002 shown in FIGS. 45, 48, 50, 52, and 53.

In some embodiments, a request to add device 100B to the master serviceaccount, device group, or multi-device service plan is communicated toanother device, device 100A. In some embodiments, device 100A is amaster device. In some embodiments, device 100A is any device associatedwith the primary service account holder (e.g., the subscriber who paysfor the service). In some embodiments, device 100A is any deviceassociated with the shared account that also has permissions to addadditional devices or subscribers to the master service account, devicegroup, or multi-device service plan. In some embodiments, the request toadd device 100B to the master service account, device group, ormulti-device service plan is communicated over a wireless network. Insome embodiments, the request to add device 100B to the master serviceaccount, device group, or multi-device service plan is communicated overa wired network. In some embodiments, the request to add device 100B tothe master service account, device group, or multi-device service planis communicated using a code or a unique display object presentedthrough a user interface of device 100B. In some embodiments, therequest to add device 100B to the master service account, device group,or multi-device service plan is communicated using an audio signal.

In some embodiments, the request to add device 100B to the masterservice account, device group, or multi-device service plan includes acredential that provides for unique identification of device 100B, suchas a subscriber identity module, a device identifier, a phone number, anInternational Mobile Subscriber Identity (IMSI), a mobile equipmentidentifier (MEID), or any other credential. In some embodiments, therequest to add device 100B to the master service account, device group,or multi-device service plan includes information that provides foridentification of a user of device 100B (e.g., a subscriber). In someembodiments, the credential comprises a secure information aspectassociated with device 100B. In some embodiments, the credentialcomprises a secure information aspect associated with device 100A (whichmay be a master device). As would be appreciated by a person havingordinary skill in the art, a credential allows a user to access networkservices using a device. A credential uniquely identifies an entity,such as a particular device 100, a particular subscriber oraccount-holder, a particular service account, etc. Examples ofcredentials include, but are not limited to, a phone number, aninternational mobile subscriber identifier (IMSI), a mobile stationidentifier (MSID), a subscriber identity module (SIM) identifier, anelectronic serial number (ESN), a mobile equipment identifier (MEID), aninternational mobile equipment identity (IMEI), a device identifier, asubscriber identifier, a service account identifier, a media accesscontrol (MAC) address, an Internet protocol (IP) address, a token, aone-time token, any other identifying information that uniquelyidentifies an entity, and combinations of these. Some credentials (e.g.,a SIM, a phone number, etc.) may be moved from one device 100 to anotherdevice 100 (e.g., from device 100A to device 100B), whereas othercredentials are permanently associated with a device 100 (e.g., an ESN,a device identifier, etc.). This document often refers to a credentialas uniquely identifying the device 100 because even a credential thatcan be moved from one device 100 to another device 100 can uniquelyidentify a particular device 100 when the credential is installed in theparticular device 100 (e.g., while a SIM card is in device 100, the SIMcard uniquely identifies the particular device 100 because the SIM cardcan only be installed in one device 100 at a time).

In some embodiments, the request to add device 100B to the masterservice account, device group, or multi-device service plan or serviceplan bundle includes information that identifies a user of device 100B.In some embodiments, the request to add device 100B to the masterservice account, device group, or multi-device service plan includesinformation that identifies a user of device 100B or information thatidentifies a user of device 100A. In some embodiments, the request toadd device 100B to the master service account, device group, ormulti-device service plan includes a credential that provides for uniqueidentification of the master service account, device group, ormulti-device service plan. In some embodiments, the credential alsoincludes a secure service plan information aspect (e.g., a password, apersonal identification number, etc.) known only to a subscriber of themaster service account, device group, or multi-device service plan. Insome embodiments, the credential comprises information associated withan aspect of an account that is associated with the master serviceaccount, device group, or multi-device service plan (e.g., an accountnumber, etc.).

In some embodiments, device 100B includes a user interface, and thefirst device agent (e.g., Device Agent 9006B) initiates the request toadd device 100B to the master service account, device group, ormulti-device service plan based at least in part on a user inputobtained through the user interface. In some embodiments, the user inputincludes: a credential that provides for unique identification of device100B; information that provides for identification of a user of device100B; information that provides for identification of a unique masterservice account, device group, or multi-device service plan; informationthat provides for identification of a user of a second device (e.g., amaster device) associated with the master service account, device group,or multi-device service plan, such as Master Device 100A; informationthat provides for identification of an account associated with themaster service account, device group, or multi-device service plan; or acombination of these.

In some embodiments, a device agent installed on a device 100 isconfigured to communicate a request to add another device to a masterservice account, device group, or multi-device service plan. In someembodiments, at least an aspect of the request is received from anetwork element, such as service controller 122 shown in FIG. 1 orSign-Up Request Processor 9002 shown in FIGS. 45, 48, 50, 52, and 53. Insome embodiments, the request to add the device to the master serviceaccount, device group, or multi-device service plan is communicated to anetwork element. In some embodiments, the request to add the anotherdevice, herein denoted as device 100B, to the master service account,device group, or multi-device service plan is communicated to device100A. In some embodiments, device 100B is a master device, and device100A is a child (or secondary) device. In some embodiments, device 100Bis a child (or secondary) device, and device 100A is a master device. Insome embodiments, both device 100A and device 100B are master devices.In some embodiments, the request to add device 100B to the masterservice account, device group, or multi-device service plan iscommunicated over a wireless network. In some embodiments, the requestto add device 100B to the master service account, device group, ormulti-device service plan is communicated over a wired network. In someembodiments, the request to add device 100B to the master serviceaccount, device group, or multi-device service plan is communicatedusing a code or a unique display object presented through a userinterface of device 100A. In some embodiments, the request to add device100B to the master service account, device group, or multi-deviceservice plan is communicated using an audio signal.

In some embodiments, the request to add device 100B to the masterservice account, device group, or multi-device service plan includes acredential that provides for unique identification of device 100A, suchas a subscriber identity module, a device identifier, a phone number, anIMSI, an MEID, or any other credential. In some embodiments, the requestto add device 100B to the master service account, device group, ormulti-device service plan includes information that provides foridentification of a user of device 100A (e.g., a subscriber). In someembodiments, the request to add device 100B to the master serviceaccount, device group, or multi-device service plan includes acredential that provides for unique identification of device 100A, suchas a subscriber identity module, a device identifier, a phone number, anIMSI, an MEID, or any other credential. In some embodiments, the requestto add device 100B to the master service account, device group, ormulti-device service plan includes information that provides foridentification of a user of device 100B. In some embodiments, therequest to add device 100B to the master service account, device group,or multi-device service plan includes a credential that provides forunique identification of device 100B. In some embodiments, thecredential comprises a secure information aspect associated with device100A. In some embodiments, the credential comprises a secure informationaspect associated with device 100B. In some embodiments, the request toadd device 100B to the master service account, device group, ormulti-device service plan includes information that identifies a user ofdevice 100A. In some embodiments, the request to add device 100B to themaster service account, device group, or multi-device service planincludes information that identifies a user of device 100B.

In some embodiments, the request to add device 100B to the masterservice account, device group, or multi-device service plan includes acredential that provides for unique identification of the master serviceaccount, device group, or multi-device service plan. In someembodiments, the credential also includes a secure service planinformation aspect known only to a subscriber of the master serviceaccount, device group, or multi-device service plan (e.g., a password, apersonal identification number, etc.). In some embodiments, thecredential comprises information associated with an aspect of an accountthat is associated with the master service account, device group, ormulti-device service plan (e.g., an account number, etc.).

In some embodiments, device 100A includes a user interface, and a firstdevice agent (e.g., Device Agent 9006A) initiates the request to adddevice 100B to the master service account, device group, or multi-deviceservice plan based at least in part on a user input obtained through theuser interface. In some embodiments, the user input includes informationassociated with at least one of: a credential that provides for uniqueidentification of device 100A; a credential that provides for uniqueidentification of device 100B; information that provides foridentification of a user of device 100A; information that provides foridentification of a user of device 100B; information that provides foridentification of a unique master service account, device group, ormulti-device service plan; and information that provides foridentification of an account associated with the master service account,device group, or multi-device service plan.

In some embodiments, a first device agent (e.g., Device Agent 9006A)installed on device 100A is configured to communicate an acknowledgmentto add device 100B to a master service account, device group, ormulti-device service plan. In some embodiments, the acknowledgmentcomprises a permission or a request acceptance. In some embodiments, theacknowledgment is based on a user response to a message presentedthrough a user interface of device 100A. In some embodiments, the deviceagent is configured to present the message. In some embodiments, themessage includes information obtained from a network element. In someembodiments, the network element is a website, a web page, a wirelessapplication protocol (WAP) site, a portal server, a message server, oran access network policy interface.

In some embodiments, the first device agent receives, from a networkelement, information associated with device 100B's request to share aservice plan. In some embodiments, the first device agent presents amessage based on the information associated with device 100B's requestto share a service plan through a user interface of device 100A, obtainsa user response, and generates the acknowledgment based on the userresponse. In some embodiments, the network element is a website, a webpage, a wireless application protocol (WAP) site, a portal server, amessage server, or an access network policy interface.

In some embodiments, the first device agent receives, from device 100B,information associated with another device's request to share a serviceplan. In some embodiments, the first device agent presents a messagebased on the information associated with the another device's request toshare a service plan through a user interface of device 100A, obtains auser response, and generates the acknowledgment based on the userresponse.

In some embodiments, a first device agent (e.g., Device Agent 9006A)installed on device 100A is configured to communicate an acknowledgmentto add device 100B to a master service account, device group, ormulti-device service plan. In some embodiments, the acknowledgmentcomprises a permission or a request acceptance. In some embodiments, thefirst device agent assists in presenting a message through a userinterface of device 100A, the message being configured to seek theacknowledgment. In some embodiments, the acknowledgment is configured toassist in enrolling device 100B in a master service account, devicegroup, or multi-device service plan. In some embodiments, the messageincludes information obtained from a network element. In someembodiments, the network element is a website, a web page, a wirelessapplication protocol (WAP) site, a portal server, a message server, oran access network policy interface.

In some embodiments, the first device agent receives, from a networkelement, information associated with device 100B's request to share aservice plan. In some embodiments, the first device agent presents amessage based on the information associated with the second device'srequest to share the service plan through a user interface of device100A, obtains a user response, and generates the acknowledgment based onthe user response. In some embodiments, the network element is awebsite, a web page, a wireless application protocol (WAP) site, aportal server, a message server, or an access network policy interface.

In some embodiments, the first device agent receives, from device 100B,information associated with another device's request to share a serviceplan. In some embodiments, the first device agent presents a messagebased on the information associated with the another device's request toshare the service plan through a user interface of device 100A, obtainsa user response, and generates the acknowledgment based on the userresponse.

In some embodiments, device 100B is not associated with a master serviceaccount, device group, or multi-device service plan. In someembodiments, a network element (e.g., service controller 122 shown inFIG. 1 or Sign-Up Request Processor 9002 shown in FIGS. 45, 48, 50, 52,and 53) is configured to accept, from a device agent (e.g., Device Agent9006B) on device 100B, a request to add device 100B to a master serviceaccount, device group, or multi-device service plan. In someembodiments, the network element confirms a secure information aspectassociated with the request, and, after confirming that the secureinformation aspect is consistent with a device that is to be added tothe master service account, device group, or multi-device service plan,configures one or more network service policies to add device 100B tothe master service account, device group, or multi-device service plan.In some embodiments, the secure information aspect comprises: acredential that provides for unique identification of device 100B;information that provides for identification of a user of device 100B;information that provides for identification of a unique master serviceaccount, device group, or multi-device service plan; information thatprovides for identification of a user of a second device (e.g., device100A) that is associated with the master service account, device group,or multi-device service plan; information that provides foridentification of an account associated with the master service account,device group, or multi-device service plan; or a combination of these.In some embodiments, an aspect of the request is communicated to adevice agent (e.g., Device Agent 9006A) installed on device 100A, and anaspect of the secure information aspect associated with the request isassociated with a user input obtained by the network element from thedevice agent on device 100A (e.g., communicated by the device agent).

In some embodiments, the network element configures the one or morenetwork service policies to add device 100B to the master serviceaccount, device group, or multi-device service plan by provisioning adevice service usage accounting system to identify service usageassociated with device 100B and account the identified first deviceservice usage to the master service account, device group, ormulti-device service plan. In some embodiments, the network elementconfigures the one or more network service policies to add device 100Bto the master service account, device group, or multi-device serviceplan by provisioning a device access service policy system to identifyattempted or successful network service activity associated with device100B and to apply a set of one or more access control policiesassociated with the master service account, device group, ormulti-device service plan to the identified attempted or successfulnetwork service activity associated with device 100B.

In some embodiments, the network element configures the one or morenetwork service policies to add device 100B to the master serviceaccount, device group, or multi-device service plan by provisioning adevice access service notification system to identify attempted oractual network service activity associated with device 100B and to applya set of one or more access service notification policies associatedwith device 100B and to apply a set of one or more access servicenotification policies associated with the multi-device service plan tocause a multi-device service plan notification to be presented throughdevice 100B's user interface.

In some embodiments, the aspect of the request that is communicated to adevice agent (e.g., Device Agent 9006A) installed on device 100Acomprises an indication that a user of device 100B desires to add device100B to the master service account, device group, or multi-deviceservice plan, and the aspect of the secure information associated withthe request that is communicated from device 100A to the network elementcomprises an indication that a user of device 100A approves enrollmentof device 100B in the master service account, device group, ormulti-device service plan.

In some embodiments, device 100A includes a user interface, and a deviceagent (e.g., Device Agent 9006A) on device 100A presents a breakdown ofusage of a shared or assigned service plan through the user interface.In some embodiments, the breakdown of service usage includes a firstsubset of a shared service plan and a second subset of the sharedservice plan. In some embodiments, the first subset is associated withdevice 100A, and the second subset is associated with a second device(e.g., device 100B). In some embodiments, neither of the first subsetand the second subset is associated with device 100A. In someembodiments, the breakdown of service usage includes a characterizationof the service activities that are generating service usage for thesecond subset. In some embodiments, the device agent is configured toaccept user inputs to specify alert conditions for assisting in creatinguser interface alert messages when the service usage for the secondsubset of the shared device plan usage associated with the second devicesatisfies a condition. In some embodiments, the condition is based on aninput from a user of device 100A. In some embodiments, the second subsetincludes a characterization of at least a portion of the deviceactivities responsible for at least a portion of the service usage ofdevice 100B. In some embodiments, the device agent on device 100A isconfigured to specify a policy limit on the service activities that aregenerating service usage for the second subset. In some embodiments, thepolicy limit specifies a limit on voice service usage. In someembodiments, the policy limit specifies a limit on data service usage.In some embodiments, the policy limit includes a limit on a subset ofservice activities less than all service activities available to device100B. In some embodiments, the policy limit includes a limit on serviceusage while device 100B is roaming. In some embodiments, the policylimit includes a limit on cellular wireless services. In someembodiments, the policy limit includes a limit on Wi-Fi access.

In some embodiments, device 100A includes a user interface, and a deviceagent on device 100A (e.g., Device Agent 9006A) is configured topresent, through the user interface, a message configured to present aservice policy management option associated with device 100B's use of ashared or assigned service plan. In some embodiments, the messageincludes at least an aspect that is obtained from a network element. Insome embodiments, the message includes at least an aspect that is storedlocally on device 100A. In some embodiments, the network element is awebsite, a web page, a wireless application protocol (WAP) site, aportal server, a message server, or an access network policy interface.In some embodiments, the message is pushed to device 100A by a networkelement.

In some embodiments, the service policy management option is a servicepermission. In some embodiments, the service policy management option isa service allowance. In some embodiments, the device agent on device100A assists in obtaining, through the user interface, a user inputindicating that a user of device 100A desires to implement the presentedservice policy management option. In some embodiments, the device agenton device 100A assists in causing the service policy management optionto be implemented to govern, at least in part, one or more servicepolicies of device 100B. In some embodiments, the device agent on device100A assists in causing the service policy management option to beimplemented by providing information to a network element configured toimplement the service policy management option. In some embodiments, thedevice agent on device 100A assists in causing the service policymanagement option to be implemented by providing information to a deviceagent (e.g., Device Agent 9006B) installed on device 100B, the deviceagent on device 100B being configured to implement the service policymanagement option. In some embodiments, the device agent on device 100Aassists in causing the service policy management option to beimplemented by communicating information that causes a device agent(e.g., Device Agent 9006A) on device 100B to implement the servicepolicy management option.

In some embodiments, the service policy management option comprises anindication or acknowledgment that device 100B is authorized to usewireless access services in accordance with access service policiesassociated with the master service account, device group, ormulti-device service plan.

In some embodiments, the service policy management option comprises anindication or acknowledgment that device 100B is authorized to use lessthan all of a total service allowance provided for under the servicepolicies associated with a multi-device (e.g., shared, shareable,assignable, or assigned) service plan. In some embodiments, the lessthan all of the total service allowance is less than the entireallowance provided for under the service policies associated with themulti-device service plan. In some embodiments, the less than all of thetotal service allowance specifies a service usage limit. In someembodiments, the limit is expressed as a percentage. In someembodiments, the limit is expressed as an amount of a resource. In someembodiments, the less than all of the total service allowance specifiesan allowance for a set of one or more service activities, the set of oneor more device service activities being less than all service activitiesavailable to device 100B. In some embodiments, the less than all of thetotal service allowance specifies a time period during which device 100Bis authorized for one or more services. In some embodiments, the lessthan all of the total service allowance specifies a time period duringwhich device 100B is authorized for a set of one or more serviceactivities less than all service activities available to device 100B. Insome embodiments, the set of one or more service activities includes oneor more emergency services (e.g., the ability to place an outgoing callto an emergency number, the ability to send an outgoing text to aspecified emergency number, etc., where the emergency number is notnecessarily a public services emergency number but could instead be anumber associated with a parent or another trusted entity). In someembodiments, the set of one or more service activities includescommunication with a subset of devices, the subset of devices less thanall devices that device 100B is capable of communicating with. In someembodiments, the less than all of the total service allowance isnetwork-dependent (e.g., there is one allowance when device 100B iscommunicating over a cellular network and another, potentiallydifferent, allowance when device 100B is communicating over a Wi-Finetwork, or there is one allowance when device 100B is communicatingover a roaming network and another, potentially different, allowancewhen device 100B is communicating over a home network, etc.). In someembodiments, the less than all of the total service allowance isassociated with service policies that apply to more than one wirelessnetwork (e.g., the service policies apply whether device 100B isconnected to a roaming network or a home network, or the servicepolicies apply whether device 100B is connected to a cellular network ora Wi-Fi network, etc.).

In some embodiments, the less than all of the total service allowancespecifies a time period during which device 100B is to be de-authorizedfor service. In some embodiments, one or more service policies governingservice usage in the de-authorized state provide for access to one ormore emergency services (e.g., the ability to place an outgoing call toan emergency number, the ability to send an outgoing text to a specifiedemergency number, etc., where the emergency number is not necessarily apublic services emergency number but could instead be a numberassociated with a parent or another trusted entity) while device 100B isin the de-authorized state. In some embodiments, one or more servicepolicies governing service usage in the de-authorized state provide forcommunication with a subset of devices while device 100B is in thede-authorized state, the subset of devices being less than all devicesdevice 100B is capable of communicating with (e.g., device 100B maycommunicate with a first parent's device but not with a sibling'sdevice). In some embodiments, the one or more service policies governingservice usage in the de-authorized state are network-dependent (e.g.,the service policies in effect when device 100B is connected to aroaming network are different from the service policies in effect whendevice 100B is connected to a home network, or the service policies ineffect when device 100B is connected to a cellular network are differentfrom the service policies in effect when device 100B is connected to aWi-Fi network, etc.). In some embodiments, the one or more servicepolicies governing service usage in the de-authorized state apply tomore than one wireless network (e.g., the service policies apply whetherdevice 100B is connected to a roaming network or a home network, or theservice policies apply whether device 100B is connected to a cellularnetwork or a Wi-Fi network, etc.).

In some embodiments, the less than all of the total service allowancespecifies a time period during which device 100B is to be de-authorizedfor a set of one or more service activities, the set of one or moreservice activities less than all service activities available to device100B (e.g., in the de-authorized state, device 100B may make phone callsto one or more numbers (e.g., an emergency number), but device 100B maynot stream video or use one or more applications or access one or morenetwork destinations).

In some embodiments, the less than all of the total service allowanceincludes a first service allowance and a second service allowance, thefirst service allowance providing information to govern an aspect of aservice policy for a first set of one or more service activities, thefirst set of service activities less than all service activitiesavailable to device 100B, and the second service allowance providinginformation to govern an aspect of a service policy for a second set ofone or more service activities. In some embodiments, the first serviceallowance allows one or more services associated with the first set ofone or more service activities, and the second service allowance blocksone or more services associated with the second set of one or moreservice activities.

In some embodiments, the policy management option comprises a policysetting. In some embodiments, the policy setting is applicable to morethan one wireless network that device 100B is capable of connecting to(e.g., the policy setting applies whether device 100B is connected to acellular network or a Wi-Fi network). In some embodiments, the policysetting has at least an aspect that changes depending on the type ofnetwork device 100B is connected to (e.g., the policy setting has afirst aspect when device 100B is connected to a cellular network and asecond aspect when device 100B is connected to a Wi-Fi network, or thepolicy setting has a first aspect when device 100B is connected to aroaming network and a second aspect when device 100B is connected to ahome network, etc.).

In some embodiments, the device agent on device 100A (e.g., Device Agent9006A) is configured to receive a message indicating a service conditionexists for device 100V. In some embodiments, the service condition is an“out of allowance” condition (e.g., device 100B has exhausted a usageallowance, etc.). In some embodiments, the service condition is anindication that a particular amount or percentage of service usage hasoccurred. In some embodiments, the service condition is an indicationthat a particular service activity that is not allowed under the currentservice policy settings for device 100B has been attempted by device100B. In some embodiments, the service condition is an indication that auser of device 100B desires a particular service activity that is notallowed under the current service policy settings for device 100B. Insome embodiments, device 100A includes a user interface, and the deviceagent on device 100A is configured to present, through the userinterface, a service-condition notification including information aboutthe service condition. In some embodiments, device 100A includes a userinterface, and the device agent is configured to present, through theuser interface, an option to modify a service policy associated withdevice 100B in response to the service-condition notification.

In some embodiments, the multi-device (e.g., shared or assigned) serviceplan comprises a set of one or more service policies that govern atleast an aspect of wireless network access permissions for one or morewireless access networks, and wherein the set of one or more servicepolicies is capable of supporting wireless access services for aplurality of wireless devices.

In some embodiments, a network system is configured to provide a userinterface to a service account owner or a manager of a master serviceaccount, device group, or multi-device service plan, wherein the userinterface presents a user option to include a device in the masterservice account, device group, or multi-device service plan, the devicenot having been included in the master service account, device group, ormulti-device service plan when the device was initially purchased oractivated. In some embodiments, the network system accepts a user inputcomprising an instruction to add the device to the master serviceaccount, device group, or multi-device service plan. In someembodiments, the network system determines whether the device is alreadyassociated with a pre-existing service plan provided by a particularmobile operator. In some embodiments, if the device is associated with apre-existing service plan provided by the particular mobile operator,the network system provisions the device to be de-activated from thepre-existing service plan and added to the master service account,device group, or multi-device service plan. In some embodiments, if thedevice is not associated with a pre-existing service plan provided bythe particular mobile operator, the network system determines if thedevice requires a number port (e.g., the transfer of a phone number). Insome embodiments, if the device is not associated with a pre-existingservice plan provided by the particular mobile operator, and the devicerequires a number port, the network system communicates the numberporting requirement to a number porting system queue in the network. Insome embodiments, if the device is not associated with a pre-existingservice plan provided by the particular mobile operator, and the devicedoes not require a number port, the network system provisions the deviceto be added to the master service account, device group, or multi-deviceservice plan.

In some embodiments, the network system user interface is provided by anetwork element. In some embodiments, the network element is a website,a web page, a wireless application protocol (WAP) site, a portal server,a message server, or an access network policy interface. In someembodiments, the user interface is provided by communicating a userinterface message to a device agent located on a device (e.g., a masterdevice). In some embodiments, the device agent is on a device belongingto an account owner or account master for the master service account,device group, or multi-device service plan. In some embodiments, thedevice accepts a user input. In some embodiments accepting the userinput comprises accepting a user secure credential to authenticate theaccount owner or account master identity. In some embodiments, thedevice belongs to a user who wishes to add the device to a masterservice account, device group, or multi-device service plan, andaccepting a user input comprises accepting a user secure credential toauthenticate that the device user has the permission of the multi-deviceservice account owner or master to add the device to the master serviceaccount, device group, or multi-device service plan. In someembodiments, accepting a user input includes accepting a user securecredential to authenticate the account owner or account master identity.

Next, this document describes several embodiments that allow asubscriber to establish a master service account and to manage theservice plans and devices associated with the master service account.

Establishing a Master Service Account

In some embodiments, a subscriber can acquire a device and establish amaster service account through the device user interface (e.g., a touchscreen) or through, for example, a website. FIG. 1 illustrates device100 equipped with service processor 115 in accordance with someembodiments. Service processor 115 is communicatively coupled to servicecontroller 122 through wireless network 9008. Service controller 122 iscommunicatively coupled to network elements that facilitate theprovisioning of services to devices, such as billing systems (notshown). The functions and capabilities of service processor 115 andservice controller 122 have been described in many other patentapplications and patents, including, for example, U.S. Pat. No.8,023,425. One of the functions of service processor 115 is to presentinformation to a user of device 100 through a user interface of device100 (e.g., a touch screen display, etc.; not shown). In someembodiments, service processor 115 also collects information from a userthrough the user interface. In some embodiments, service processor 115sends some or all of the collected information, or a representation ofsome or all of the collected information, over a control channel toservice controller 122. In some embodiments, the control channel issecured by an encryption protocol.

In some embodiments, service controller 122 is also communicativelycoupled to service design center 135. In some embodiments, servicedesign center 135 allows a service provider or a service providerpartner entity, through service provider/third-party interface 145, toconfigure service plan and service plan bundle offerings fordistribution to devices such as device 100. In some embodiments, servicedesign center 135 allows a service provider or a service providerpartner entity to configure the messages, information, and screens asillustrated by multiple figures provided herein.

FIG. 2 illustrates an exemplary message in a representative screen 2802,in accordance with some embodiments, that is presented through the userinterface of device 100 when device 100 is not yet associated with amaster service account. The message informs the subscriber that device100 is not associated with an existing service account and asks if thesubscriber would like to create a new master service account or joindevice 100 to an existing master service account. In some embodiments,the message informs the subscriber of an option to transfer a serviceaccount from a different device to device 100. In some embodiments, thesubscriber may select “New Account” and select “Create.”

FIG. 3 illustrates an exemplary message in a representative screen 2803,in accordance with some embodiments, that is presented as a result ofselecting “Create” in FIG. 2. In this particular example, the subscribermay choose between a prepay account and a post-pay account. As would beappreciated by a person having ordinary skill in the art, a prepayaccount is established by depositing some amount of money (or moneyequivalent) in the account and debiting that amount of money as thesubscriber uses for-fee services. With a post-pay account, on the otherhand, the subscriber uses services on credit and is then billed forservice usage after some period of time (e.g., after one month haspassed). In the example shown in FIG. 3, the subscriber chooses a prepayaccount and enters information to establish the master service account.The subscriber then selects “Create.” In some embodiments, thesubscriber is presented multiple screens in which to enter accountinformation. In some embodiments, subscriber is presented an option totransfer all or part of account information from another account. Insome embodiments, the subscriber is presented an option to transferaccount information from a third-party service partner system (e.g.,from an Apple ID account, an iTunes account, an iCloud account, a Googleaccount, an Amazon account, or other account that can have requisiteidentification and/or credit information for the subscriber.)

FIG. 4 shows a representative screen 2804 illustrating information thatmay be presented, in some embodiments, through the user interface ofdevice 100 after the subscriber has established a master service accountfor device 100 (e.g., by following the procedure described above). Inrepresentative screen 2804, there are four icons: “Lines & Devices,”“Account,” “Plans & Sharing,” and “Help.” In some embodiments, selecting“Lines & Devices” allows the subscriber to access information aboutthose devices 100 that are associated with the master service account.In some embodiments, selecting “Account” allows the subscriber to accessinformation about the master service account. In some embodiments,selecting “Plans & Sharing” allows the subscriber to access informationabout available service plans and, if additional devices 100 areassociated with the master service account, whether and how thoseservice plans are shared among devices 100 in a device group.

When a subscriber selects the “Account” partition 2801 in FIG. 4, FIG. 5illustrates a representative screen 2805 that may be displayed as aresult according to some embodiments. The display prompts the subscriberfor the password associated with the master service account so that theuser can view information about the account. After the subscriber entersthe password, the subscriber selects “OK.” In some embodiments, apassword or other credential is required in order to establish a newaccount. In some embodiments, a password or other credential is requiredto be entered in order to associate with an existing account. In someembodiments, a password or credential is associated with a set ofpermission levels that determine what account information thesubscriber/user can enter and/or modify for a new or existing account.In some embodiments, a set of screens presented to the subscriber/userare dependent on the type of credential and/or password entered by thesubscriber/user during the account setup process. In some embodiments,additional information is obtained from the subscriber/user to be usedfor supplemental authentication. In some embodiments, a set of securityquestions is presented to the user/subscriber through one or morescreens on device 100. In some embodiments, answers to at least one ofthe set of security questions is used for supplemental authorization,e.g., when accessing a service management system or a customer supportsystem.

FIG. 6 illustrates a representative screen 2806 of information that maybe presented to the subscriber who provides the correct accountpassword. The subscriber can access information about the accounthistory by selecting either “Transactions and Balance” or “Usage.” Thesubscriber can access information about billing and payments byselecting “Payment methods,” “Top up now,” or “Configure Top up.” Thesubscriber can access other information about the account by selecting“Account Information.”

FIG. 7 illustrates an example of a display 2807 that may be presentedwhen the subscriber selects “Payment Methods.” Although FIG. 7illustrates the situation in which a subscriber pays by credit card, aswould be appreciated by a person having ordinary skill in the art, manyother payment schemes are possible, including, for example, debit cards,automated clearing house (ACH) transactions, direct debit from anaccount at a financial institution, PayPal, Scratcher, e-Money, oranother form of virtual money. It is also possible that the paymentmethod comprises other consideration, such as credits a subscriberearned in some manner (e.g., by viewing advertisements, for accepting anoffer, etc.).

In the example of FIG. 7, the payment method is a credit card, and thesubscriber selects a credit card type and enters information in variousfields. The subscriber enters his or her name in the “Name” field; thecredit card number in the “Card Number” field; the credit card'sexpiration date in the “Expiration” fields; the credit card's securitycode in the “Security Code” field; the subscriber's address in the“Address” field; and a nickname for the credit card in the “PaymentNickname” field. In this example, the subscriber can also choose toremove the credit card or use the credit card as the default paymentmethod. The subscriber completes entry of the payment information byselecting “Update.”

FIG. 8 illustrates a representative screen 2808 displaying that, in someembodiments, when the subscriber selects “Payment methods” in FIG. 6,the credit card entered through the display shown in FIG. 7 is listed(in this example as the default payment method). This screen alsoinvites the subscriber to enter an additional payment method byselecting “Add a new payment method.”

FIG. 9 is an example of a screen 2809 that may be presented, inaccordance with some embodiments, when the subscriber selects “Top upnow” from the display 2806 shown in FIG. 6. As shown in FIG. 9, thesubscriber's master service account balance is $100. The subscriber hasthe option to add funds to the subscriber's prepay account. As shown inFIG. 9, the subscriber may choose to add $10, $20, $50, or $100 to theaccount balance. The subscriber's default payment method (“VISA-1111”)is presented as the payment source. By selecting “Top up” with theselections shown in FIG. 9, the subscriber will add $10 to the accountbalance of $100, thus resulting in a total balance of $110. Afterselecting “Top up,” the subscriber would be able to select “RefreshBalance” to confirm that the account balance is $110.

FIG. 10 illustrates an example of a screen 2810 that may be presentedwhen a subscriber selects “Configure Top up” shown in FIG. 6. As shownin the example of FIG. 10, the subscriber may choose to “top up” (e.g.,add funds to) the account when the balance is less than a particularvalue (“Balance is less than _”), on a particular day each month (“Everymonth on the _”), or manually (“No auto top up”). The subscriber selectsan amount for the top up and a payment source and selects “Update” tocomplete the configuration. Although FIG. 10 illustrates an example inwhich the user tops up the account using a credit card, other sources totop up are possible, including, for example, debit cards, automatedclearing house (ACH) transactions, direct debit from an account at afinancial institution, PayPal, Scratcher, e-Money, or another form ofvirtual money. It is also possible that the payment method comprisesother consideration, such as credits a subscriber earned in some manner(e.g., by viewing advertisements, for accepting an offer, etc.).

Although FIGS. 7 through 10 illustrated the configuration and managementof a prepay account, it should be noted that, in some embodiments, thesubscriber may alternatively configure the master service account to bea post-pay account. In some embodiments, the subscriber configures themaster service account to be a post-pay account and is billed later forservices. In some embodiments, the subscriber does not have to enterpayment information to set up a post-pay account. In some embodiments,the service provider bills the subscriber with a post-pay account at aregular interval (e.g., monthly). In some embodiments, the serviceprovider bills the subscriber after the subscriber has accumulated aparticular amount of charges (e.g., after the subscriber has accumulated$5 of charges).

FIG. 11 illustrates a representative screen 2811 of information that maybe presented, in accordance with some embodiments, when the subscriberwho has established a master service account selects “Lines & Devices”from the screen 2804 shown in FIG. 4. As indicated by FIG. 11, there isonly one device 100 associated with the master service account (“JeffMaster”).

Adding Devices to Master Service Account

Having used one device, hereinafter referred to as the “master device”(“Jeff Master” in FIG. 11), to establish a master service account andconfigure payment options, including a payment source and, if desired,an automated top up of master service account funds, in someembodiments, the subscriber is able to add other devices 100,hereinafter referred to as “child devices” or “secondary devices,” tothe master service account and create a device group. It should be notedthat the designation of the device used to set up the master serviceaccount as a “master device” is for illustrative purposes. As will beappreciated by a person having ordinary skill in the art in light ofthis disclosure, once a master service account has been established, thecapabilities of and permissions granted to the devices associated withthat master account can be modified. Thus, a device that was originallya “master” device can be made a child device, and a device that wasoriginally a child device can be promoted to a master device. The use ofthe terms “master” and “child” herein is merely to improve readability.As would be appreciated by a person having ordinary skill in the art,whether a device is a “master” or a “child” is dependent on thecapabilities of and permissions granted by a subscriber to that device.

FIG. 12 illustrates a representative display 2812 that may be presented,in some embodiments, when the subscriber attempts to use a child devicethat is not yet associated with the master device, any other devices, adevice group, or the master service account. In this particular example,the information presented through the child device user interface is thesame as the information presented through the master device in theexample of FIG. 2. As would be appreciated by a person having ordinaryskill in the art, the information presented may differ, and the childdevice may display more or less information than the master device.Because the subscriber has already established a master service account,as described above, the subscriber selects “Existing Account” toindicate that the subscriber wishes to add the child device to themaster service account. The subscriber selects “Next” to proceed.

In accordance with some embodiments, FIG. 13 illustrates arepresentative display 2813 that may be presented when the subscriberselects “Next” in FIG. 12. The child device presents information thatenables the subscriber to “link” (i.e., pair, associate, etc.) the childdevice with the master device and to add the child device to the masterservice account. In some embodiments, such as the example shown in FIG.13, the information is displayed on the child device's user interface.In some embodiments, the information is included in a text message or ane-mail message received by the child device, by the master device, or bythe subscriber. In some embodiments, for security purposes, the providedinformation expires after a particular time period, and the displayprovides a countdown timer to indicate much time remains for thesubscriber to complete the linking procedure. In some embodiments, thereis no countdown timer. In some embodiments, the information that allowsthe subscriber to link the child device to the master service account isa bar code, a quick response (QR) code, or a sequence of alphanumericcharacters (e.g., a password). In some embodiments, the information isan instruction for the subscriber to perform some type of action, suchas holding the child device in proximity to the master device to allowthe information transfer from the child device to the master device.There are many ways the information can be transferred, including, forexample, infrared beaming, Bluetooth exchange, and text messageexchange. As would be appreciated by a person having ordinary skill inthe art, there are many types and forms of information that can enablethe linking of the child device to the master device (and to the masterservice account), and the examples provided herein are not intended tobe limiting.

FIG. 14 illustrates a representative screen 2814 of information that maybe presented on the master device, in accordance with some embodiments,when a subscriber attempts to link a child device to the master device(and to the master service account). In the example of FIG. 14, thesubscriber is instructed to enter, through the master device userinterface, the information that enables the subscriber to link the childdevice to the master device. In some embodiments, the subscriber entersthe information by using the master device to scan the informationpresented through the child device (e.g., by using the master device toscan a barcode, QR code, or alphanumeric string displayed on the childdevice). In some embodiments, the subscriber manually enters (e.g., bytyping) the information into the master device. In some embodiments, thesubscriber holds the master device in proximity to the child device toallow a near-field communication transfer, a beam transfer, or someother wireless information transfer to occur. As would be appreciated bya person having ordinary skill in the art, the information transfercould also be accomplished through a wired transfer, e.g., through apersonal computer or another device connected by a USB connection, anEthernet connection, or another wired connection. As would also beappreciated by a person having ordinary skill in the art, there are manyways to enter the information to allow the child device to join themaster account, and the examples provided herein are not intended to belimiting.

FIG. 15 illustrates a representative screen 2815 that may be presentedby the master device after the subscriber has entered the informationthat allows the child device to be linked to the master device and itsassociated master service account. In this example, the pairing codeshown in FIG. 13 has been transferred to the master device, whether bymanual entry, by scanning, or by some other method. The subscribercompletes the joining process by selecting “Add now.”

FIG. 16 illustrates a representative screen 2816 displaying an examplemessage that may be presented through the master device's user interfaceafter the subscriber has selected “Add now” in FIG. 15. The masterdevice message indicates that the subscriber has successfully added anew device to the master service account. The message also invites thesubscriber to learn how to share service plans among devices associatedwith the master service account.

FIG. 17 illustrates a representative screen 2817 displaying an examplemessage that may be presented through the child device's user interfaceafter the subscriber has selected “Add now” from FIG. 15. The childdevice message indicates that the child device has been added to themaster service account.

FIG. 18 illustrates a representative screen 2818 displaying that, inaccordance with some embodiments, the subscriber can view all devicesassociated with the master service account by selecting “Lines &Devices” from the display of FIG. 4. As illustrated by FIG. 18, thereare two devices associated with the master service account: “Jeff Child”and “Jeff Master.” Although FIG. 18 presents an example in which thereis only one master device in the device group, there can be more thanone master device in a device group, and each master device can beconfigured so that it can, but need not necessarily, manage childdevices in the device group.

In addition to establishing multiple master devices and permissionsassociated with each master device, the subscriber can establishpermission privileges for added (e.g., child) devices. FIG. 19illustrates a representative screen 2819 displaying an example ofpermission privileges the subscriber can grant to a child device inaccordance with some embodiments. In some embodiments, a subscribergrants full control to an added device. In some embodiments, a devicewith full control can manage the master service account, add or removedevices from the master service account, and purchase service plans. Insome embodiments, a device with full control has the capabilities of amaster device. In some embodiments, a subscriber grants an added devicethe ability to purchase service plans, but not the ability to configureor manage the master service account or the devices in the device group.In some embodiments, a subscriber grants no privileges to an addeddevice. In some embodiments, a user of a device with no privilegescannot purchase service plans or view or manage the master serviceaccount.

Sharing Service Plans

Having added another device to the master service account, thesubscriber can manage all devices in the device group and can share oneor more service plans among devices in the device group. The subscribercan also assign a service plan from a master device to a child device.In some embodiments, service plans are designed to be shareable,assignable (see below), or not shareable. In some embodiments, serviceplans are designed using a service design center, e.g., service designcenter 135 illustrated in FIG. 1, and the sharing properties are enteredthrough the service design center. In some embodiments, a service planhas an attribute that determines whether it is shareable. In someembodiments, service plans that are shareable are automatically sharedwhen devices are added to the master service account. In someembodiments, service plans that are shareable are not automaticallyshared when devices are added to the master service account.

FIG. 20 illustrates a representative screen 2820 presenting an exampleof a service plan bundle, called “Starter Plan,” that has been purchasedusing the master device. The illustrated service plan bundle includesservice plans for 100 text messages, 20 hours of application use, and250 minutes of phone calls.

In some embodiments, the subscriber can view information about sharedservice plans and can share service plans by selecting “Plans & Sharing”from the screen shown in FIG. 4. FIGS. 21 and 22 illustrate that beforesharing the “Starter Plan,” all of the “250 Minutes of Talk” serviceplan is allocated to the master device (“Jeff Master”), and that none ofthe “250 Minutes of Talk” service plan is allocated to the child devicethat is now also associated with the master service account. In someembodiments, selecting the “250 Minutes of Talk” service plan in screen2821 shown in FIG. 21, launches screen 2822 shown in FIG. 22. Byselecting “Share this plan” from screen 2822 illustrated in FIG. 22, thesubscriber can share the “250 Minutes of Talk” service plan with anotherdevice.

FIG. 23 illustrates a representative screen 2823 presenting an exampleof plan sharing options that may be available to the subscriber in someembodiments. In the example shown in FIG. 23, the subscriber can choose“Simple” or “Advanced” sharing, and the subscriber can choose whichdevice(s) in a device group will be able to share the selected serviceplan. In some embodiments, “Simple” sharing allows all selected devicesto share the service plan with no limits on their individual usage.Thus, all selected devices share in the usage of an aggregate amount ofa resource (e.g., a total number of bytes or a total period of time).FIG. 24 illustrates a representative screen 2824 displaying that, aftera simple share of “250 Minutes of Talk,” both the master device (“JeffMaster”) and the child device (“Jeff Child”) are authorized to use up to250 minutes of the service plan.

Rather than simply sharing a service plan among multiple devices, whichmay not prevent “hogging” of the allocation provided by the service planby individual devices, it may be desirable to allocate discrete portionsof a service plan to different devices within the device group. Forexample, a parent who has purchased a service plan that includes 500voice minutes and 100 text messages per month might want to allocate 100of the voice minutes and 40 text messages to each of her two children'smobile phones. FIG. 25 illustrates a representative screen 2825 for“Advanced” service plan sharing in accordance with some embodiments. Asshown in FIG. 25, the subscriber can make less than all of the sharedservice plan available to devices in the device group. In FIG. 25, themaster device is allowed to use the entire service plan allocation,whereas the child device is not allowed to use any of the service planallocation. In the representative screen 2826 illustrated in FIG. 26,however, the subscriber has enabled the child device to use up to fiftypercent of the “250 Minutes of Talk” service plan allocation. The masterdevice is still allowed to use up to all of the “250 Minutes of Talk”service plan allocation, however. Thus, the master device may still“hog” the service plan's allocation, but the subscriber has ensured thatthe child device cannot use more than half of the service plan'sallocation.

FIG. 27 illustrates a representative screen 2827 displaying that,following the “Advanced” share illustrated in FIG. 26, the master devicemay use up to all of the “250 Minutes of Talk” service plan allocation,whereas the child device may only use up to 125 minutes or half of the“250 Minutes of Talk.”

As would be appreciated by a person having ordinary skill in the art,there are many ways a service plan could be shared among devices. Forexample, the subscriber could allocate a certain percentage or amount(e.g., number of minutes, number of texts, number of bytes, etc.) of aservice plan to each device associated with the master service accountsuch that the sum of all individual allocations is equal to the totalallowed by the service plan. As would also be appreciated by a personhaving ordinary skill in the art, the subscriber may choose to sharedifferent service plans differently among devices in the device group.Similarly, when the subscriber has purchased a service plan bundle, suchas “Starter Plan,” the subscriber may choose to share constituentservice plans of the service plan bundle differently (e.g., a parent maychoose to share 80% of the text messages but only 50% of the voiceminutes with a child), or she may choose to share all service plansincluded in a service plan bundle in the same way (e.g., a parent mayallow a child to use up to 50% of each service plan included in theservice plan bundle.)

In some embodiments, the subscriber chooses to place limits on a serviceusage amount (e.g., impose a cap or specify an allocation) that can beconsumed by a particular device in the device group, e.g., by entering aspecific service usage limit using the master device or by using anotherdevice and providing a credential that indicates that the subscriber haspermission to set service usage limits. By providing a limit for aservice usage amount, the subscriber can prevent the particular devicefrom “hogging” the service plan. In some embodiments, the particulardevice that is limited is the master device. In some embodiments, theparticular device that is limited is a child device in a device groupshared with the master device (i.e., of which the master device is alsoa member). In some embodiments, the particular device is another devicein a device group shared with the master device. In some embodiments,the particular device is a device managed by a system administrator.

In some embodiments, the subscriber specifies a “micro-lease”allocation, wherein a device (master or child) is provided an allocationof service usage, and the device subsequently requests an additionalallocation after the initial allocation is exhausted.

In some embodiments, the master device monitors usage by devices in thedevice group and changes one or more plan-sharing parameters based onthe monitored usage. In some embodiments, the master device revokes anallocation when the master device determines that the allocation is notbeing used, or when the master device determines that another device hasa greater need for the allocation. In some embodiments, the masterdevice changes an allocation (i.e., increases or decreases anallocation) based on a metric. In some embodiments, the metric is anamount of usage (or a failure to use a service plan) during a timeperiod. In some embodiments, the metric is an expected usage during atime period. In some embodiments, the metric is based on service planusage by one or more other devices in the device group. In someembodiments, the master device reapportions a service plan or anallocation of a service plan to one or more devices based on adetermination that the reapportionment will reduce waste of the serviceplan.

In some embodiments, the subscriber specifies one or more parameters toassist the master device in managing plan sharing. In some embodiments,the master device manages plan sharing without subscriber involvement.

In some embodiments, the subscriber allocates a maximum amount of aservice plan for a period of time and establishes a “metering” of thetotal during a sequence of time periods (e.g., a total of 100 textmessages during a month and no more than 25 text messages per week). Insome embodiments, the subscriber allocates an initial allocation to achild device and then allocates an additional allocation (e.g., asmaller allocation) when the child device exhausts the initialallocation.

In the examples provided herein, none of the “Starter Plan” service planbundle had been consumed when the subscriber shared the service planbundle with another device. In some embodiments, had a portion of theservice plan bundle been consumed prior to sharing, the subscriber wouldonly be able to share what service usage allocation remained of theservice plan bundle. In some embodiments, each service plan within aservice plan bundle can be shared individually.

Assigning Service Plans

In some embodiments, a subscriber may want to allocate the entirety of aservice plan to a child device, leaving none of the service planavailable to the master device. For example, a parent might purchase aservice plan that is of great interest to her child but of no interestto the parent. In some embodiments, therefore, a subscriber may assign aservice plan from one device in the device group to another device inthe device group. In some embodiments, a service plan must be assignableto be assigned. In some embodiments, whether a service plan isassignable is configured using a service design center. In someembodiments, a service plan has an attribute that determines whether itis assignable. In some embodiments, a service plan is assignable but notshareable. In some embodiments, a service plan is shareable but notassignable. In some embodiments, a service plan is both shareable andassignable. In some embodiments, a service plan is neither shareable norassignable. In some embodiments, one or more permission policies thatcan apply to a shared service plan can also apply to an assigned serviceplan.

FIG. 28 illustrates a representative screen 2828 for a master devicewith a service plan called “iStoryBooks” that is available to the masterdevice (“Jeff Master”) but not to the child device (“Jeff Child”). FIG.28 is representative of a situation in which a parent purchased theservice plan using the master device.

FIG. 29 illustrates a representative screen 2829 for a master devicethat has a service plan (“iStoryBooks”) that is available to both themaster device and the child device. FIG. 29 is representative of asituation where the service usages of the shared service plan by themaster device and the child device are presented on the master device(e.g., through the master device's user interface). In the embodimentshown in FIG. 29, the service usage of the master device is presentedseparately from the service usage of the child device. In someembodiments, the service usage can be consolidated into a singleprogress bar. In some embodiments, where the service usage isconsolidated into a single progress bar, the service usage amounts fromthe master and the child device are represented with different colors,dividers, labels, or some other visual cue to delineate the serviceusage associated with the different devices.

FIG. 30 illustrates a representative screen 2830 for a master devicethat has a service plan (“iStoryBooks”) that is available to both themaster device and the child device. FIG. 30 is representative of asituation where the service usages of the shared service plan by themaster device and the child device are displayed on the master deviceand the service usage is displayed as a percentage of a service usageallocation relative to a service plan allocation limit. In theembodiment illustrated in FIG. 30, the service usage of the masterdevice is separated from the service usage of the child device. In someembodiments, the service usage can be consolidated to display on asingle progress bar. In some embodiments, where the service usage isconsolidated on a single progress bar, the service usage amounts fromthe master device and the child device are represented with differentcolors, dividers, labels, or some other visual cue to delineate theservice usage of the different devices.

FIG. 31 illustrates a representative screen 2831 for a master devicewith a service plan that is available to both the master device and thechild device. FIG. 31 is representative of a situation where the serviceusage is displayed by application, and application service usage isshown for each device that is associated with the shared service plan.In some embodiments, the service usage can be consolidated on a singleprogress bar. In some embodiments, where the usage is consolidated on asingle progress bar, the service usage amounts from the master deviceand the child device are represented with different colors, dividers,labels, or some other visual cue to delineate the service usage of thedifferent devices.

FIG. 32 illustrates a representative screen 2832 for a master devicewith a service plan that is available to both the master device and thechild device. FIG. 32 is representative of a situation where the serviceusages of the shared service plan per network end-point (e.g., domain,IP address, URL, etc.) by the master and the child devices are presentedon the master device, and the service usage display is displayed asservice usage per network end-point. In the embodiment of FIG. 32, theservice usage of the master device is separated from the service usageof the child device. In some embodiments, the service usage can beconsolidated on a single progress bar. In some embodiments, where theservice usage is consolidated on a single progress bar, the serviceusage amounts from the master device and the child device arerepresented with different colors, dividers, labels, or some othervisual cue to delineate the service usage of the different devices.

FIG. 33 illustrates a representative screen 2833 for a master devicewith a service plan that is available to the master device and two childdevices. FIG. 33 is representative of a situation where the service planhas time of day usage measurements, and the usage is displayed bytime-of-day categories (e.g., peak and off-peak), and usage bytime-of-day category is shown for each device that is associated withthe shared service plan. In some embodiments, the service usage can beconsolidated on a single progress bar. In some embodiments, where theservice usage is consolidated on a single progress bar, the serviceusage amounts from the master device and the child device arerepresented with different colors, dividers, labels, or some othervisual cue to delineate the service usage of the different devices.

FIG. 34 illustrates a representative screen 2834 for a master devicewith a service plan that is available to the master device and two childdevices. FIG. 34 is representative of a situation where the serviceusage is displayed by network type, and service usage by network type isshown for each device that is associated with the shared service plan.In some embodiments, the service usage can be consolidated on a singleprogress bar. In some embodiments, where the service usage isconsolidated on a single progress bar, the service usage amounts fromthe master device and the child device are represented with differentcolors, dividers, labels, or some other visual cue to delineate theservice usage of the different devices.

FIG. 35 illustrates a representative screen 2835 for a master devicewith a service plan that is available to the master device and two childdevices. FIG. 35 is representative of a situation where the service planincludes QoS Level service usage measurements, the service usage isdisplayed by QoS Level (e.g., streaming and interactive), and serviceusage by QoS Level is shown for each device that is associated with theshared service plan. In some embodiments, the service usage can beconsolidated on a single progress bar. In some embodiments, where theservice usage is consolidated on a single progress bar, the serviceusage amounts from the master device and the child device arerepresented with different colors, dividers, labels, or some othervisual cue to delineate the service usage of the different devices.

As would be appreciated by a person having ordinary skill in the art,there are many different examples, combinations, and permutations ofshared service usage displays, and the examples presented herein aremeant to be illustrative and not intended to be limiting.

FIG. 36 illustrates a representative screen 2836 displaying that the“iStoryBooks” service plan is currently available only to the masterdevice (“Jeff Master”). By selecting “Assign this plan,” the subscribercan assign the “iStoryBooks” service plan to another device in thedevice group.

FIG. 37 illustrates a representative screen 2837 that may be presentedas a result of selecting “Assign this plan” in accordance with someembodiments. By selecting “Jeff Child” and selecting “Apply,” thesubscriber assigns the “iStoryBooks” service plan to the child device.

FIG. 38 illustrates a representative screen 2838 displaying that afterthe subscriber selects “Apply” from the display shown in FIG. 37, the“iStoryBooks” service plan has been assigned to the child device and isno longer available to the master device.

FIG. 39 illustrates a representative screen 2839 displaying thatalthough the “iStoryBooks” service plan has been assigned to the childdevice, the subscriber can reassign the service plan by selecting“Assign this plan.” For example, a parent could temporarily remove the“iStoryBooks” service plan from her child's device if she needed to.

Although FIG. 37 indicates that in some embodiments, the entirety of aservice plan is assigned to a single device (i.e., either “Jeff Master”or “Jeff Child”), in some embodiments, a subscriber can assign a singleservice plan to more than one device. For example, a subscriber who hastwo children, each of whom has a device 100, can assign “iStoryBooks” toboth children's devices. The children would then share the service plan.In some embodiments, when a subscriber assigns a service plan tomultiple devices, the subscriber specifies how the service plan will beshared by the multiple devices (e.g., using the terminology of FIG. 23,in a “Simple” or “Advanced” manner).

As will be appreciated by a person having ordinary skill in the art inlight of the disclosures herein, a difference between a subscriberassigning a service plan to one or more devices and the subscribersharing the service plan is that, in some embodiments, a shared serviceplan remains visible on the master device as a service plan that isavailable to the master device, whereas an assigned service plan doesnot remain visible on the master device as a service plan that isavailable to the master device.

It should now be apparent to a person having ordinary skill in the artthat there are many unique and interesting ways that a subscriber canshare and assign service plans, and the examples herein are not intendedto be limiting.

Monitoring Usage and Transactions

In addition to adding devices to the master service account, sharingservice plans, and assigning service plans, subscribers may track usageand access usage history by selecting “Usage” from the display 2806shown in FIG. 6. For example, FIG. 40 illustrates a representativescreen 2840 showing that a subscriber may access child device usage (inthis case, usage by “Jeff Child”) through the child device. FIG. 40shows that the child device has used only one minute of the 20 hours ofapplication use, and none of the “iStoryBooks” service plan.

The subscriber may track usage for all devices or for just the masterdevice from the master device by selecting “Usage” from the screen 850illustrated in FIG. 6. For example, FIGS. 41 and 42 illustraterepresentative screens 2841 and 2842 showing usage for the categories ofvoice and data, respectively. According to FIG. 41, all “250 Minutes ofTalk” remain available.

FIG. 43 illustrates a representative screen 2843 showing the masterdevice's presentation of usage of the “20 Hours of Applications” plan byeach device in the device group during a particular time period (in thisexample, the month of June 2012).

In addition to viewing information about service usage, in someembodiments, the subscriber can access information about transactions.FIG. 44 illustrates a representative screen 2844 of informationavailable to a subscriber who selects “Transactions and Balance” fromthe screen 2806 illustrated in FIG. 6. In FIG. 44, the transactions fromthe month of June 2012 are presented. They included a user initiatedtop-up and two service plan purchases (“Starter Plan” and“iStoryBooks”). As shown in FIG. 44, following these transactions, thesubscriber's master account has a balance of $93.56.

In some embodiments, a child device sends a message to a master devicewhen a usage allocation is exhausted (e.g., when the child device hasexhausted its share of a service plan) or when a particular milestone ismet (e.g., when the child device has only two minutes of talk timeleft). In some embodiments, the child device sends a message to a masterdevice, and the master device presents a notification to the subscriberto provide information about the service usage event on the childdevice. In some embodiments, the master device suggests a solution tothe service usage event, such as by presenting an offer to thesubscriber, such as an offer to purchase an additional service plan oran offer to assist the subscriber in modifying the parameters of ashared service plan.

In some embodiments, a child device sends a message to a master devicewhen a user of the child device has attempted an unauthorized serviceusage. For example, in some embodiments, if a user of a child deviceattempts to send a text message, but the child device does not have anallocation of text messages, the child device sends a message to themaster device to report that the child device attempted to send a textmessage. In some embodiments, the child device sends a message about anattempted unauthorized service usage to the master device withoutinteraction with or input from a user of the child device. In someembodiments, the master device presents an offer to the subscriber, suchas an offer to purchase an additional service plan or an offer to assistthe subscriber in modifying the parameters of a shared service plan.

In some embodiments, the child device presents a notification throughits user interface when a user of the child device attempts anunauthorized service usage. In some embodiments, a user of a childdevice subject to an allocation (e.g., a maximum number of textmessages) who exhausts the allocation can send a message to one or moremaster devices to request an additional allocation. In some embodiments,the child device assists a user of the child device in requesting aservice plan or additional resources from the subscriber.

In some embodiments, a subscriber can access the master service accountfrom a device that is not a master device, but is associated with themaster service account, by logging into the master service account(e.g., through a screen such as the representative screen 2805illustrated in FIG. 5). This functionality may be useful for when amaster device is not immediately accessible, but the subscriber wishesto share a service plan, modify service plan sharing for one or moreservice plans, or assign a service plan.

In some embodiments, a subscriber can give, as a gift, a service plan ora portion of a service plan to a device 100 that is not within thedevice group but that is capable of receiving the gift. For example, insome embodiments, a subscriber can give a service plan or a portion of aservice plan to a device outside a first device group but within asecond device group.

In some embodiments, a user of child device with no purchase capabilitycan, from the child device, request that the master device grant thechild device access to a service. For example, in some embodiments, whena user of a child device attempts to use or access a service that is notauthorized, the child device will present a notification that indicatesthe child device is not authorized for the service. In some embodiments,the notification facilitates the child device requesting access from themaster device (e.g., the notification includes a button called “RequestAccess From Master”). In some embodiments, the master device receivesthe request and presents a notification through the master device's userinterface, thus allowing the subscriber to grant or deny access to therequested service. In some embodiments, the master device sends amessage to the child device indicating whether the request was grantedor denied. In some embodiments, after receiving the message from themaster device, the child device presents a notification through a userinterface to indicate whether the request was granted or denied.

On-Device Multi-Device Service Sign-Up

FIG. 45 illustrates a system configuration that enables amaster-subscriber-initiated on-device multi-device service sign-upprocedure in accordance with some embodiments. Sign-Up Request Processor9002 is communicatively coupled to database 9000 (labeled “DB”), and toSubscriber Management System 9004. Sign-Up Request Processor 9002 isalso communicatively coupled, through network 9008, to Master Device100A and Secondary Device 100B. Master Device 100A includes Device Agent9006A, and Secondary Device 100B includes Device Agent 9006B.

FIG. 46 illustrates an exchange of messages and processing of messagesby Master Device 100A, Secondary Device 100B (referred to as the childdevice in the context of FIGS. 2 through 44), Sign-Up Request Processor9002, and Subscriber Management System 9004 illustrated in the systemconfiguration of FIG. 45. FIG. 46 illustrates a representativeembodiment for the subscriber of Master Device 100A to add SecondaryDevice 100B to the master service account, device group, or multi-deviceservice plan. Additional embodiments are also discussed further herein.

In some embodiments, the master device subscriber initiates the linkingprocess. In some embodiments, the master device subscriber (e.g., via aDevice Agent 9006A) requests a one-time token from Sign-Up RequestProcessor 9002 (labeled 4600A in FIG. 46). At 4600B, Sign-Up RequestProcessor 9002 verifies with Subscriber Management System 9004 that thesubscriber associated with Master Device 100A has permission to addadditional devices to the master service account, device group, ormulti-device service plan (e.g., by verifying a username and/orpassword, credential, etc.). At 4600C, Sign-Up Request Processor 9002generates a one-time token, associates it with the master subscriber(e.g., device credential, user credential, account credential, etc.),stores the token and the credential in database 9000 (labeled DB) andthen, at 4600D, delivers the token to the master subscriber (via DeviceAgent 9006A). At 4600E, the master device subscriber shares the one-timetoken with the intended secondary device subscriber (e.g., via email,SMS, MMS, an image that can be scanned (e.g., bar code, QR Code, etc.),sound file, NFC, “bump,” Bluetooth message, etc.). The secondary devicesubscriber enters the one-time token (via the Device Agent) on SecondaryDevice 100B. There are many ways the secondary device subscriber canenter the one-time token, e.g., by scanning an image, sending orreceiving or opening an email attachment, sending or receiving oropening an SMS, sending or receiving or opening an MMS attachment,sending or receiving or opening a sound file, through a near fieldcommunication (NFC), through a “bump” with another device (e.g., MasterDevice 100A), using a Bluetooth message, etc. In some embodiments, themaster device subscriber shares the token with Secondary Device 100B bydisplaying an image that can be scanned on its screen, and SecondaryDevice 100B's Device Agent 9006B scans the image (e.g., with a built-incamera and scanning software). In some embodiments, Master Device 100A'sDevice Agent 9006A displays a PIN code on Master Device 100A and thesecondary device subscriber enters that PIN code into Secondary Device100B via Device Agent 9006B. In other embodiments, Master Device 100Ashares the token with Secondary Device 100B via a Bluetooth link, anear-field communication (NFC), a “bump,” or any other type ofcommunication that allows devices in relatively close proximity tocommunicate with each other.

At 4600F, Device Agent 9006B sends the entered token information plusits (e.g., device, user, etc.) credential (e.g., 2nd credential shown inFIG. 46) from Secondary Device 100B to Sign-Up Request Processor 9002.At 4600G, Sign-Up Request Processor 9002 looks up the token in database9000 and obtains the master device credential (e.g., 1st credentialshown in FIG. 46). At 4600H, Sign-Up Request Processor 9002 sends themaster device credential, the secondary device credential and a requestto join Secondary Device 100B to the master service account, devicegroup, or multi-device service plan to Subscriber Management System9004. Subscriber Management System 9004 de-provisions (if necessary)Secondary Device 100B from its current plan and, at 4600I, addsSecondary Device 100B as a subscriber onto the master service account,device group, or multi-device service plan (e.g., for voice, text anddata). (De-provisioning Secondary Device 100B from its current plan isnot shown explicitly in FIG. 46, but de-provisioning can occur, in someembodiments, before adding Secondary Device 100B to the intended masterservice account, device group or multi-device service plan.) At 4600J,Subscriber Management System 9004 provisions the network elements torecognize that Secondary Device 100B is now associated with the masterservice account, device group, or multi-device service plan. At 4600K,the Master device subscriber and secondary device subscribers bothreceive a notification that Secondary Device 100B is associated with themaster service account, device group, or multi-device service plan.Optionally, in some embodiments, the network system (or the masterdevice subscriber) can assign usage quotas to Secondary Device 100B.

In some embodiments, Sign-Up Request Processor 9002 does not send thetoken back to Master Device 100A, but instead sends it directly toSecondary Device 100B to enable the secondary device subscriber toaccept the “invitation” to be added to the shared plan. In thisembodiment, when the secondary device subscriber accepts the invitation,the token is sent back to Sign-Up Request Processor 9002 as describedabove, and the provisioning process occurs.

In some embodiments, the master device subscriber initiates the sharerequest from a website. In this embodiment, the process is similar tothe process where the share request is initiated from Master Device100A. In this embodiment, the master device subscriber logs into asecure website or portal and enters the necessary information toinitiate the sharing request (e.g., his account number, user credential,device credential, etc.) and the request is then processed in the samemanner as if the request originated from Master Device 100A.

In some embodiments, the token is a PIN and the PIN is deliveredout-of-band to the secondary device subscriber (e.g., via SMS, emailmessage, etc.). In some embodiments, the secondary device subscribercalls an Interactive Voice Recognition (IVR) system and enters the PIN.The IVR obtains the PIN (e.g., through DTMF tones or throughvoice-to-text processing) and delivers it to Sign-Up Request Processor9002. From there, the process continues as if the request were handledby Device Agent 9006B on Secondary Device 100B.

In some embodiments, the token is a PIN and the PIN is deliveredout-of-band to the secondary device subscriber (e.g., via SMS, emailmessage, etc.). In some embodiments, an IVR system automatically callsthe secondary device subscriber (at a phone number specified by theMaster device subscriber in the share request or on the secondary deviceitself, etc.). The secondary device subscriber then enters the PIN(e.g., using DTM voice-to-text processing) on the IVR and the IVRdelivers the PIN to Sign-Up Request Processor 9002. From there, theprocess continues as if the request were handled by Device Agent 9006Bon Secondary Device 100B.

In some embodiments, Master Device 100A is a first device that has amaster device credential provisioned into a network access servicepermission system by Subscriber Management System 9004 to provide forMaster Device 100A to access network services in accordance with amulti-device service plan, and Secondary Device 100B is a second devicethat has a secondary device credential provisioned into the networkaccess service permission system by Subscriber Management System 9004 toprovide for secondary device access network services in accordance witha multi-device service plan.

In some embodiments, the master device credential is provisioned intothe network access service permission system before the secondary devicecredential is provisioned into the network access service permissionsystem. In some embodiments, the secondary device credential isprovisioned into the network access service permission system before themaster device credential is provisioned into the network access servicepermission system. In some embodiments, the secondary device credentialand the master device credential are provisioned at the same time intothe network access service permission system.

In some embodiments, Sign-Up Request Processor 9002 is located in thecarrier network. In some embodiments, Sign-Up Request Processor 9002 islocated in a third-party provider network (e.g., device OEM, VSP, MVNO,device OS provider, Voice over IP (VoIP) provider, etc.).

The system illustrated in FIG. 45 also enables asecondary-subscriber-initiated on-device multi-device service sign-upprocedure in accordance with some embodiments. FIG. 47 illustrates anexchange of messages and processing of messages by Master Device 100A,Secondary Device 100B, Sign-Up Request Processor 9002, and SubscriberManagement System 9004 illustrated in the system configuration of FIG.45. FIG. 47 illustrates a representative embodiment for a subscriber ofSecondary Device 100B to request that the subscriber of Master Device100A add Secondary Device 100B to the master service account, devicegroup, or multi-device service plan. Additional embodiments are alsodiscussed further herein.

In some embodiments, at 4700A, the secondary device subscriber (viaDevice Agent 9006B) sends a request to Sign-Up Request Processor 9002requesting to add Secondary Device 100B a device to the Master Device'smaster service account, device group, or multi-device service plan. Therequest includes Secondary Device 100B's credential and/or the user'scredential (e.g., MEID, IMEI, IMSI, MSID, phone number, account number,etc.) and a credential for Master Device 100A's account (e.g., MEID,IMEI, phone number, IMSI, MSID, account number, etc.). (The secondarydevice and/or user's credential is labeled as “2nd credential” in FIG.47. The credential for the master device's account is labeled as “1stcredential” in FIG. 47.) At 4700B, Sign-Up Request Processor 9002verifies with Subscriber Management System 9004 that the subscriber ofMaster Device 100A has permission to add additional devices to themaster service account, device group, or multi-device service plan(e.g., by verifying a credential, etc.). In some embodiments, at 4700C,Sign-Up Request Processor 9002 saves Master Device 100A and SecondaryDevice 100B and/or user information in database 9000. At 4700D, Sign-UpRequest Processor 9002 generates a request. At 4700E, Sign-Up RequestProcessor 9002 delivers the request to the Master device subscriber(e.g., via SMS, email, PIN code, message to Device Agent 9006A on MasterDevice 100A, etc.). The Master device subscriber receives the requestand responds to the request via Device Agent 9006 (e.g., enters hiscredentials, enters the PIN code, etc.). At 4700F, Device Agent 9006delivers the response to Sign-Up Request Processor 9002. At 4700G,Sign-Up Request Processor 9002 looks up the Master Device credential(labeled as “1st credential” in FIG. 47) in database 9000 and obtainsthe secondary device credential. At 4700H, Sign-Up Request Processor9002 sends the master device credential, the secondary devicecredential, and a request to add the secondary device to the masterservice account, device group, or multi-device service plan toSubscriber Management System 9004. In some embodiments, SubscriberManagement System 9004 de-provisions (if necessary) Secondary Device100B from Secondary Device 100B's current plan and, at 4700I, addsSecondary Device 100B as a subscriber onto the master service account,device group, or multi-device service plan (e.g., for voice, text anddata). (De-provisioning of Secondary Device 100B from Secondary Device100B's current plan, if needed, is not shown explicitly in FIG. 47.) At4700J, Subscriber Management System 9004 provisions the network elementsto recognize that Secondary Device 100B is now associated with themaster service account, device group, or multi-device service plan. At4700K, the master device subscriber and secondary device subscriber eachreceive a notification that that Secondary Device 100B is now associatedwith the master service account, device group, or multi-device serviceplan. Optionally, in some embodiments, the network (or the master devicesubscriber) can assign usage quotas to Secondary Device 100B.

FIG. 48 illustrates a system configuration enabling Secondary Device100B to be added to a master service account, device group, ormulti-device service plan without the use or involvement of MasterDevice 100A in accordance with some embodiments. FIG. 49 illustrates anexchange of messages and processing of messages by Master Device 100A,Secondary Device 100B, Sign-Up Request Processor 9002, and SubscriberManagement System 9004 illustrated in the system configuration of FIG.48. Additional embodiments are also discussed further herein.

At 4900A, the master device subscriber enters his credentials onSecondary Device 100B (via Device Agent 9006B). (The master devicesubscriber credentials are labeled “1st credential” in FIG. 49.) At4900B, Device Agent 9006B sends a request including the master devicesubscriber credential (e.g., username, password, account number, phonenumber, etc.) and a secondary device credential (e.g., MEID, IMEI, MSID,IMSI, phone number, secondary device subscriber account number, etc.) toSign-Up Request Processor 9002 requesting that Secondary Device 100B beadded as a device to the master service account, device group, ormulti-device service plan. (The secondary device credential is labeled“2nd credential” in FIG. 49.) In some embodiments, the request includesSecondary Device 100B's credential and/or the user's credential (e.g.,MEID, IMEI, IMSI, MSID, phone number, account number, etc.) and acredential for the Master Device's account (e.g., MEID, IMEI, phonenumber, IMSI, MSID, account number, etc.). At 4900C, Sign-Up RequestProcessor 9002 verifies with Subscriber Management System 9004 that thesubscriber of Master Device 100A has permissions to add additionaldevices to the master service account, device group, or multi-deviceservice plan (e.g., by verifying a credential, etc.). At 4900D, Sign-UpRequest Processor 9002 sends the master device credential, the secondarydevice credential and a request to join Secondary Device 100B to themaster service account to Subscriber Management System 9004. At 4900E,Subscriber Management System 9004 de-provisions (if necessary) SecondaryDevice 100B from Secondary Device 100B's current plan and, at 4900F,adds Secondary Device 100B to the master service account, device group,or multi-device service plan (e.g., for voice, text and data). At 4900G,Subscriber Management System 9004 provisions the network elements torecognize that Secondary Device 100B is now associated with the masterservice account, device group, or multi-device service plan. At 4900H,the master device subscriber and secondary device subscriber eachreceive a notification that that Secondary Device 100B is now associatedwith the master service account, device group, or multi-device serviceplan. Optionally, the network (or the master device subscriber) canassign usage quotas to Secondary Device 100B.

In some embodiments, Sign-Up Request Processor 9002 is located in thecarrier network. In other embodiments, Sign-Up Request Processor 9002 islocated in a third-party provider network (e.g., device OEM, VSP, MVNO,device OS provider, VoIP provider, etc.).

FIG. 50 illustrates a system configuration that enables the enrollmentof Secondary Device 100B entirely from Master Device 100A in accordancewith some embodiments. FIG. 51 illustrates an exchange of messages andprocessing of messages by Master Device 100A, Secondary Device 100B,Sign-Up Request Processor 9002, and Subscriber Management System 9004illustrated in the system configuration of FIG. 50. Additionalembodiments are also discussed further herein.

At 5100A, the master device subscriber enters a secondary devicecredential (e.g., IMSI, MSID, IMEI, MEID, phone number, etc.) (viaDevice Agent 9006A). (The secondary device credential is labeled “2ndcredential” in FIG. 51.) At 5100B, Device Agent 9006A sends a requestincluding the master device subscriber credential (e.g., username,password, account number, phone number, IMSI, MSID, IMEI, MEID, etc.)and the secondary device credential (e.g., MEID, IMEI, MSID, IMSI, phonenumber, etc.) to Sign-Up Request Processor 9002 requesting thatSecondary Device 100B be added to the master service account, devicegroup, or multi-device service plan. (The master device subscribercredential is labeled “1st credential” in FIG. 51.) At 5100C, Sign-UpRequest Processor 9002 verifies with Subscriber Management System 9004that the subscriber of Master Device 100A has permission to addadditional devices to the master service account, device group, ormulti-device service plan (e.g., by verifying a credential, etc.). At5100D, Sign-Up Request Processor 9002 sends the master devicecredential, the secondary device credential and a request to addSecondary Device 100B to the master service account, device group, ormulti-device service plan to Subscriber Management System 9004. At5100E, Subscriber Management System 9004 de-provisions (if necessary)Secondary Device 100B from its current plan and, at 5100F, addsSecondary Device 100B to the master service account, device group, ormulti-device service plan (e.g., for voice, text and data). At 5100G,Subscriber Management System 9004 provisions the network elements torecognize that Secondary Device 100B is now associated with the masterservice account, device group, or multi-device service plan. At 5100H,the master device subscriber and secondary device subscriber eachreceive a notification that that Secondary Device 100B is now associatedwith the master service account, device group, or multi-device serviceplan. Optionally, in some embodiments, a network element (e.g.,Provisioning or Policy Management) or the master device subscriber canassign usage quotas to Secondary Device 100B.

In some embodiments, prior to sending the “add” request to SubscriberManagement System 9004 at 5100D, Sign-Up Request Processor 9002 may senda validation request to Secondary Device 100B (via Device Agent 9006B)or the secondary device subscriber to confirm the change and wait forthe response before performing the “add” action. In some embodiments,the request is an SMS, a call from an IVR system, an email, anotification on Secondary Device 100B (via Device Agent 9006B), etc.

In some embodiments, the master device subscriber adds Secondary Device100B to the master device subscriber's shared plan prior to SecondaryDevice 100B being activated. In some embodiments, the master devicesubscriber adds Secondary Device 100B to the master device subscriber'sshared plan at the time that Secondary Device 100B is being provisionedor activated.

In some embodiments, where Secondary Device 100B is added to the masterservice account, device group, or multi-device service plan prior orduring the activation process, Sign-Up Request Processor 9002 delivers anotification to the secondary device subscriber indicating that thedevice has been associated with the master service account, devicegroup, or multi-device service plan. In some embodiments, thenotification is delivered to Device Agent 9006B for presentation througha user interface of Secondary Device 100B. In some embodiments, thenotification is delivered as an SMS, MMS, voice message (either live orIVR), or email. In some embodiments, the notification requires thesecondary device subscriber to acknowledge the notification prior toassociating Secondary Device 100B with the master service account,device group, or multi-device service plan. In some embodiments, thesecondary device subscriber is automatically associated with the masterservice account, device group, or multi-device service plan without thesecondary device subscriber having to confirm the notification.

In some embodiments, Sign-Up Request Processor 9002 is located in thecarrier network. In other embodiments, it is located in a third-partyprovider network (e.g., device OEM, VSP, MVNO, device OS provider, VoIPprovider, etc.).

Service Plan Sharing with Allowance Limits

In some embodiments in which a service plan is shared, the master devicesubscriber may wish to only share a portion of the total service planwith a secondary device subscriber. In some embodiments, the sharingprocess includes a step where the master device subscriber defines whatportion or portions of the service plan (voice service plan, messagingservice plan, data access service plan, etc.) are to be shared with thesecondary device subscriber. In some embodiments, the portions representa set of services less than all of the services offered by the serviceplan to be shared. In some embodiments, the portions are represented byimitations expressed in voice minutes, long distance minutes,international calling destinations, international calling minutes,number of text messages, number of MMS messages, access to specific dataservices (e.g., website, domain, content type (e.g., streaming audio,streaming video, VoIP, etc.), quality-of-service (QoS) rated services,protocol type, general data access in time or usage (e.g., megabytes,kilobytes, etc.), application usage, content downloads, content uploads,3G access, 4G access, Wi-Fi access, etc.), time periods (e.g., days ofthe week, specific hours in a day, or total hours in a day, total hoursin a week, total days in a month, etc.), or other units that areapplicable to the shared portion of the service plan. In someembodiments, the portions can be expressed as percentage of the serviceplans' service usage allowance for a category of service (e.g., 5% ofthe voice minute allowance, 20% of the data allowance, etc.) or absolutevalues (e.g., 20 minutes of voice, 100 messages, 5 MB of data, 5 hoursof data use, 1 hour of VoIP calling, 30 minutes of media streaming,etc.). In some embodiments, the sharing limits are set up with theinitial offer to share. In some embodiments, the sharing limits are setup after the plan has been shared with Secondary Device 100B. In someembodiments, in which sharing limits are set up with the initial offerto share, the sharing attributes may be stored in database 9000 andassociated with the sharing token. When the secondary device subscriberis provisioned onto the sharing plan, the sharing attributes are alsocommunicated to Subscriber Management System 9004 along with the “add”request.

In some embodiments, the master device subscriber may purchase an add-onservice plan for the secondary device subscriber and allocate (e.g.,assign) the entire add-on service plan to the secondary devicesubscriber (e.g., the secondary device subscriber gets an add-on serviceplan that provides additional service usage quota for a service that thesecondary device subscriber uses more frequently than other users (e.g.,an application-specific (e.g., Facebook, email, etc.) service plan, anadditional allocation of voice minutes or text messages, etc.). In someembodiments, the master device subscriber adds certain capabilities(that might be offered at a discount) to certain users so that thoseusers do not consume the quotas of the shared service plan while usingthese activities. For example, a master device subscriber might share anon-streaming data plan with a secondary device subscriber, but thesecondary device subscriber desires to stream data (e.g., by watching avideo, listening to streaming audio, video conferencing, etc.). Themaster device subscriber may purchase an audio/video streaming-capableservice plan and assign that service plan to Secondary Device 100B, butnot to other devices. This allows the secondary device subscriber tostream data without the master device subscriber having to purchase alarger streaming capable plan.

Sharing with Curfews

In some embodiments in which a service plan is shared, the master devicesubscriber may wish to set curfews (e.g., no messaging between 10:00 PMand 6:00 AM, email data access only during school hours, no voice callsexcept certain numbers during the school day (e.g., numbers on a“whitelist”), no international long distance calls, etc.) associatedwith Secondary Device 100B (which may be a child device) as part of thesharing process. In some embodiments, these curfews provide limits onusage of certain aspects of the shared portion of the service plan andthus provide for further control of service plan sharing. In someembodiments, the service plan sharing process includes a step where themaster device subscriber defines the curfews on the portion or portionsof a service plan (voice service plan, messaging service plan, dataaccess service plan, etc.) that are to be shared with Secondary Device100B. The curfews can be expressed as limits on certain aspects of theservice plan during certain time periods (e.g., no text messaging from10:00 PM until 6:00 AM Monday-Friday, only allow voice calls to acertain set of numbers during school hours, no Hulu videos after 8:00PM, etc.), maximum usage of an aspect of a service plan during a timeperiod (e.g., maximum of 30 minutes of voice calling per day onweekdays, maximum of 20 MB of Facebook during school hours, no textmessaging on Mondays, etc.). In some embodiments, the curfews restrictcertain types of access during a specified interval. In someembodiments, the curfews limit certain types of access during aspecified interval. In some embodiments, the curfews are set up with theinitial offer to share. In some embodiments, the curfews are set upafter the secondary device subscriber has been joined to a sharedservice plan. In some embodiments in which the curfews are set up withthe initial offer to share, the curfew attributes are stored in database9000 and associated with the sharing token. When the secondary devicesubscriber is provisioned onto a shared service plan, the curfewattributes are communicated to Subscriber Management System 9004 alongwith the “add” request. In some embodiments, curfews are combined withsharing limits (e.g., 100 MB of data usage during the service plan cycleand no data usage allowed during school hours, etc.).

User Establishing Quotas/Curfews/Limitations on Service Usage

In some embodiments, a user may want to set quotas, curfews orlimitations on his own service usage. One motivation for doing this maybe cost-related (e.g., a user wants to ensure a service plan allowanceis not exhausted before the end of the service plan cycle, a user wantsto prevent overages, a user's company subsidizes only a certainpercentage of service plan usage and the user does not want to exhausthis portion of the allowance, etc.), but there may be other reasons. Insome embodiments, the notification enables the secondary subscriber torequest additional service from the master subscriber when thenotification is triggered. In some embodiments, the notification enablesan automatic purchase (or re-purchase) of a specified service plan. Insome embodiments, the automatic purchase of a service plan also deliversa notification to the master subscriber. In some embodiments, thenotification that is delivered to the master subscriber is delivered viaemail, SMS, MMS, a message on Master Device 100A (e.g., through DeviceAgent 9006A), a message on a portal, or a message on a website. In someembodiments, the user interacts with Device Agent 9006A on his device toset the desired service controls. Device Agent 9006A communicates theservice limits to Subscriber Management System 9004 (either directly orvia an intermediate element), and Subscriber Management System 9004provisions the controls to the appropriate enforcement elements. In someembodiments, the control elements are network elements (e.g., policycontroller, policy charging and rules function (PCRF), policy chargingenforcement function (PCEF), etc.). In some embodiments, the controlelements are device-based agents/elements. In some embodiments, thecontrol agents/elements exist both in the network and on the device.

Notifications

In some embodiments, the master device subscriber may desire to set upnotifications for secondary users to alert them when they are reachingplan allowances, their individual quota allowances, plan time elapsed orremaining, usage velocity (e.g., rate of service usage), etc. In thesetypes of embodiments, the master device subscriber can, from his deviceor from an alternative device (e.g., a Secondary Device 100B, anotherdevice associated with the master service account, device group, ormulti-device service plan, a website visited from a computer or tablet,etc.), set up these notifications. In some embodiments, thenotifications can also include actions or offers to modify an aspect ofservice usage (e.g., turn off or block certain services because anallocated quota is running out, or because a service is expensive whileroaming, etc.). In other embodiments, the notifications can include anaction to also inform the master device subscriber of a secondary devicesubscriber's activity within the service. In some embodiments, thisalert to the master device subscriber can also include a request fromthe secondary device subscriber to increase the secondary devicesubscriber's quota allocation, to purchase additional service and assignan additional allocation to the secondary device subscriber, tore-allocate other users' quotas on the service to this particularsecondary subscriber, etc. In some embodiments, these notifications canbe initiated because a particular secondary user is not using much ofhis allocated quota, and the notification is sent to the master devicesubscriber to inform the master device subscriber of the condition andallow the master device subscriber to reallocate the quota as the masterdevice subscriber deems appropriate (e.g., the subscriber may give moreservice allocation to a different user (including himself) since theparticular secondary device subscriber is not going to use hisallocation based on current usage velocity (e.g., the average rate ofdata consumption over a period of time (e.g., one hour, one day, oneweek, etc.)) trends).

In some embodiments, the master device subscriber uses an application(e.g., application locally on Master Device 100A, a website from acomputer, an application on Secondary Device 100B, etc.) to configurethe notifications. In some embodiments, the master device subscriberenters a login credential, an account number, a phone number, etc., toidentify him as someone who is authorized to make changes to theaccount. Once logged in, the master device subscriber interacts with theapplication to set up the desired notifications for the specificsecondary device subscriber (or users). In some embodiments, thenotifications are configured to be the same for all secondary devicesubscribers. In some embodiments, the notifications are specific to eachsecondary device subscriber. In some embodiments, the notifications arespecific to a subset of secondary device subscribers. For example, in anenterprise scenario, there may be groups of users based on theirposition or function within the enterprise (e.g., sales, executive,field service, etc.). Each group of users may have different sets onnotifications configured by the master device subscriber because eachgroup of users may have different aspects of a service plan shared withthem. For example, a sales group and a field service group may have alarger allocation of service usage for maps and navigation services, andthere could be notifications for service usage within that particularallocation for those groups, so they know if they are running out ofthat type of service. In a family share scenario, the children mighthave limited access to a social networking application during schoolhours (e.g., 10 MB, 30 minutes, etc.), and the master device subscribersets a notification to notify the child when she is reaching her dailylimit. In some embodiments, the notification that is configured isdelivered to the specific user of the service (e.g., the child, etc.).In some embodiments, the notification is delivered to the master devicesubscriber. In some embodiments, the notification is delivered to boththe master device subscriber and the specific user of the service. Oncethe notifications are configured, they are sent to Subscriber ManagementSystem 9004. Subscriber Management System 9004 provisions thenotification type, parameters, text, actions, etc. to the variouselements that are responsible for implementing the notification policy.In some embodiments, the elements are network-based elements (e.g., OCS,PCRF, PCEF, notification element, etc.). In some embodiments, theelements are device-based agents (e.g., agents for local usage counting,local classification and policy management, local notification agent,etc.). In some embodiments, the elements are located in both the networkand the device (e.g., accounting and policy control in the network,notification agent on the device, etc.). Once the elements areprovisioned, the notification policy is associated with the appropriatesubscribers (e.g., the one or more secondary device subscribers) andenabled when the subscriber is actively using the services.

As discussed previously, in some embodiments, the notification isactionable by either the secondary device subscriber or the masterdevice subscriber. For example, in an enterprise scenario, when the useris reaching the limit of an enterprise-paid service, the notificationcan include an option for the secondary device subscriber to purchaseadditional service just for him (e.g., not shared with other users). Insome embodiments, the notification action is to alert the master devicesubscriber so he can take action (e.g., purchase additional sharedservice, purchase service just for that user, reallocate usage quotas,etc.). In some embodiments, the notification to the master devicesubscriber includes an option to purchase additional service. In someembodiments, the additional service includes shared service (e.g.,additional usage for all subscribers on the shared account). In someembodiments, the additional service is specifically for the subscriberwhose usage profile generated the notification. In some embodiments, theadditional service is for a specific subset of subscribers on the sharedservice plan. In some embodiments, the master device subscriber has theoption to decline the additional service offer. In some embodiments, theaction taken by the master device subscriber (e.g., additional servicepurchased, no additional service purchased, etc.) is communicated to thesecondary Device subscriber. In some embodiments, the communication isvia email, SMS, MMS, a message delivered to Device Agent 9006B onSecondary Device 100B, a message displayed on a portal, or a messagedisplayed on a website.

In some embodiments, the system is configured to detect when DeviceAgent 9006B on Secondary Device 100B has been tampered with. In someembodiments, tampering includes removal of Device Agent 9006B,modification of Device Agent 9006B, or modification of the configurationdata used by Device Agent 9006B. In some embodiments, this is achievedby detecting that Device Agent 9006B on Secondary Device 100B has notsent a heartbeat message (e.g., a message configured to inform a networkelement that the device agent is present and operating properly, wheresuch messages are possibly sent periodically or upon request by thenetwork element) to Sign-Up Request Processor 9002 (or other monitoringnetwork element) or to Device Agent 9006A on Master Device 100A in theconfigured time interval. In some embodiments, the detection is achievedby inspecting traffic to or from Secondary Device 100B and determiningif the inspected traffic conforms to the controls that are expected tobe enforced (e.g., whether there is data usage when data curfews are inplace, whether there is a voice call to a non-whitelisted number when avoice curfew is in place, etc.). In some embodiments, detectingtampering is achieved by verifying a credential of Device Agent 9006B, asoftware signing key, a software hash, a software configurationintegrity, a software configuration hash, an operating system (OS)credential, an OS software hash, or an OS signing key. In someembodiments, the detection occurs on Secondary Device 100B. In someembodiments, the detection occurs on Master Device 100A. In someembodiments, the detection occurs in the network. In some embodiments,the detection is performed by two or more elements (e.g., missingheartbeat message between Secondary Device 100B and a network element).In some embodiments, when it has been detected that tampering hasoccurred on Secondary Device 100B, a notification is sent to the masterdevice user. In some embodiments, the notification is delivered directlyto Master Device 100A via, for example, SMS, Device Agent 9006Bnotification, email or IVR phone call. In some embodiments, thenotification also includes an alert sound to bring immediate attentionto the notification. In some embodiments, the notification is displayedon top of all other UI elements on the master device. In someembodiments, the notification is delivered to other account entities inaddition to the master device subscriber or Master Device 100A. In someembodiments, the notification is delivered to multiple account entities.

In some embodiments, the master device credential is provisioned intothe network access service permission system to provide a master deviceuser with a higher level of control over multi-device service planconfiguration, and the secondary device credential is provisioned intothe network access service permission system to provide a secondarydevice user with a lesser degree of control over multi-device serviceplan configuration. In some embodiments, the secondary device credentialis provisioned into the network access service permission system toprovide a secondary device user with a higher level of control overmulti-device service plan configuration, and the master devicecredential is provisioned into the network access service permissionsystem to provide a master device user with a lesser degree of controlover multi-device service plan configuration. In some embodiments, themaster device credential and the secondary device credential areprovisioned into the network access service permission system to providethe same degree of control over multi-device service plan configurationto a user of Master Device 100A and a user of Secondary Device 100B.

In some embodiments, the control over multi-device service planconfiguration comprises the ability to approve or initiate purchasing,upgrading, downgrading or discontinuing a service plan or a multi-deviceservice plan. In some embodiments, the control over multi-device serviceplan configuration comprises the ability to approve or initiate addingor deleting one or more devices associated with the master serviceaccount, device group, or multi-device service plan. In someembodiments, the control over multi-device service plan configurationcomprises the assignment of or approval of a service usage allowance forone or more devices capable of receiving services in accordance with themulti-device service plan. In some embodiments, the service usageallowance comprises a voice, text or data usage allowance for one ormore wireless access networks. In some embodiments, the allowancecomprises an allowance on one or more applications or one or moreapplication types that may be used on one or more wireless accessnetworks. In some embodiments, the allowance comprises a time of day ortime period allowance during which one or more access network servicesmay be used. In some embodiments, the allowance comprises an allowancefor communication with one or more network end points or websites or oneor more network endpoint types or website types over one or morewireless access networks. In some embodiments, the allowance comprisesan allowance for one or more content types or traffic types on one ormore wireless access networks. In some embodiments, the allowancecomprises an allowance for one or more QoS levels on one or morewireless access networks. In some embodiments, the allowance comprisesone or more roaming permission levels for one or more wireless roamingnetworks. In some embodiments, an allowance is implemented byprovisioning an allowance policy instruction or allowance policy settinginto one or more device agents on the device associated with theallowance. In some embodiments, the allowance is implemented byprovisioning an allowance policy instruction or allowance policy settinginto a device service processor on the device associated with theallowance.

In some embodiments, information defining at least an aspect of theallowance is obtained from one or more device agents on master device100A (e.g., Device Agent 9006A). In some embodiments, informationdefining at least an aspect of the allowance is obtained from one ormore device agents on Secondary Device 100B (e.g., Device Agent 9006B).In some embodiments, information defining at least an aspect of theallowance is obtained from a master device user or secondary device userinput to a website or portal. In some embodiments, information definingat least an aspect of the allowance is obtained from an account ownerinput to a website or portal.

In some embodiments, the control over multi-device service planconfiguration comprises the assignment of or approval of a service usagelimit for one or more devices capable of receiving services inaccordance with the multi-device service plan. In some embodiments, theservice usage limit comprises a voice, text, or data usage limit for oneor more wireless access networks. In some embodiments, the limitcomprises a limit on one or more applications or one or more applicationtypes that may be used on one or more wireless access networks. In someembodiments, the limit comprises a time of day or time period limitduring which one or more access network services may be used. In someembodiments, the limit comprises a limit on communication with one ormore network end points or websites or one or more network endpointtypes or website types over one or more wireless access networks. Insome embodiments, the limit comprises a limit for one or more contenttypes or traffic types on one or more wireless access networks. In someembodiments, the limit comprises a limit for one or more QoS levels onone or more wireless access networks. In some embodiments, the limitcomprises one or more roaming limitations for one or more wirelessroaming networks. In some embodiments, a limit is implemented byprovisioning a limit policy instruction or limit policy setting into oneor more network elements responsible for providing wireless accessnetwork permission for one or more wireless access networks to thedevice associated with the limit. In some embodiments, a limit isimplemented by provisioning a limit policy instruction or limit policysetting into one or more network elements responsible for providingwireless access network permission for one or more wireless accessnetworks to the device associated with the limit.

Notifications During a Voice Call

In some embodiments, one or more device applications, one or more deviceagents (e.g., Device Agent 9006), or one or more service processoragents (the “service purchase application”) are configured to allow auser to purchase a voice service allowance increase, upgrade, serviceplan increase, “top up,” or other service increase during the time adevice user is conducting a phone call.

In some embodiments, coincident in time with a voice call beingconducted over a cellular wireless network, the service purchaseapplication is configured to establish a data connection over the samecellular network to a network server, service controller, activationserver, or billing server (the “service purchase server”) that isconfigured to modify, increase, or effect a purchase of a voice serviceallowance, and the service purchase application is further configured tocommunicate a user selection to purchase a voice service allowanceincrease, upgrade, service plan increase, “top up,” or other serviceincrease during the time a device user is conducting a phone call.

In some embodiments, coincident in time with a voice call beingconducted over a cellular wireless network, the service purchaseapplication is configured to establish a secure data connection over thesame cellular network to the service purchase server, and the servicepurchase application is further configured to provide one or more devicecredentials to identify the device to the service purchase server andcommunicate a user selection to purchase a voice service allowanceincrease, upgrade, service plan increase, “top up,” or other serviceincrease during the time a device user is conducting a phone call. Insome embodiments, the voice application is further configured to displaya user interface notification that provides the user with one or moreactionable options to purchase additional voice service during a voicecall. In some embodiments, the service purchase application isconfigured to track real time voice service usage coincident in timewith a voice call taking place.

In some embodiments, the service purchase application is configured totrack real time voice service usage coincident in time with a voice calltaking place and communicate, or display on the device UI, an indicationof the real time voice service usage during the call. In someembodiments, the service purchase agent is further configured tocommunicate an indication of the real time voice service usage throughan earpiece or speaker of the device. In some embodiments, the servicepurchase agent is further configured to communicate an indication of thereal time voice service usage through an earpiece or speaker of thedevice during the time a voice call is being conducted. In someembodiments the service purchase agent is further configured tocommunicate an indication of the real time voice service usage throughan earpiece or speaker of the device during the time a voice call isbeing conducted in a manner that does not result in a call participanton the other side of the call from the device hearing the communicationof an indication of the real time voice service usage.

In some embodiments, the service purchase application is configured totrack real time voice service usage coincident in time with a voice calltaking place and communicate, or display on the device UI, an indicationof the real time voice service usage during the call, the indication ofreal time voice service usage comprising text on the UI, numericindication on the UI, an amount of use compared to a service limit onthe UI, an amount of use as a percentage of a service limit on the UI,an indication that there is a certain amount of time consumed on theservice plan, an indication that there is only a certain amount of timeleft on a service plan, or any combination of these. In someembodiments, the display on the device UI of an indication of the realtime voice service usage during the call comprises a graphical object.In some embodiments, the graphical object comprises a graph, ahorizontal bar, a vertical bar, a dial or gauge, a pie, or a slider.

In some embodiments, the service purchase application is configured totrack real time voice service usage coincident in time with a voice calltaking place and communicate through an earpiece speaker connected tothe device an indication of the real time voice service usage during thecall, the indication of real time voice service usage comprising a voicemessage. In some embodiments, the voice message comprises a numericindication, an amount of use compared to a service limit, an amount ofuse as a percentage of a service limit, an indication that there is acertain amount of time consumed on the service plan, an indication thatthere is only a certain amount of time left on a service plan, or anycombination of these.

In some embodiments, the service purchase application is configured totrack real time voice service usage during a voice call, and compare thevoice service usage against one or more pre-configured limits onservice, and when one of the one or more service limits is reached,communicate, or display on the device UI, a notification message asdescribed above. In some embodiments, the message includes a devicepop-up UI that enables a user of the device to select a voice upgrade,top up, service plan increase, or other voice service purchase. In someembodiments the service purchase application is further configured tocommunicate the user selection to a service purchase server coincidentin time with the voice call. In some embodiments, the service purchaseagent is configured to complete the purchase prior to the voice callending so that the call can continue beyond an original limit on voiceservice use. In some embodiments, the service purchase agent is furtherconfigured to provide an acknowledgement to the device UI that theservice purchase has been completed. In some embodiments, the servicepurchase agent is further configured to provide an acknowledgement tothe device UI that the service purchase has been completed prior to thevoice call ending.

In some embodiments, a cellular network system is configured tosimultaneously establish a data communication connection between adevice service purchase application and a service purchase servercoincident in time with a voice call being conducted by the samecellular network, and the service purchase server is configured toaccept a service purchase agent voice service purchase indication andcause a voice service plan to be upgraded, to increase a voice servicelimit, reconfigure a voice or bundle service plan, or purchase a newvoice or bundle service plan. In some embodiments, the voice servicepurchase server is configured to increase voice service before the endof a voice call so that the voice call can continue beyond an originalservice limit.

In some embodiments, the voice service purchase server is furtherconfigured to cause the voice service plan to be upgraded, to increase avoice service limit, reconfigure a voice or bundle service plan, orpurchase a new voice or bundle service plan by communicating with abilling system to assist in changing a service plan status associatedwith the device credential.

In some embodiments, the voice service purchase server is furtherconfigured to cause the voice service plan to be upgraded, to increase avoice service limit, reconfigure a voice or bundle service plan, orpurchase a new voice or bundle service plan by communicating with a OCSsystem to assist in changing a service plan status associated with thedevice credential.

In some embodiments, the voice service purchase server is furtherconfigured to cause the voice service plan to be upgraded, to increase avoice service limit, reconfigure a voice or bundle service plan, orpurchase a new voice or bundle service plan by communicating with aservice controller or activation server system to assist in changing aservice plan status associated with the device credential.

In some embodiments, the voice service purchase server is furtherconfigured to cause the voice service plan to be upgraded, to increase avoice service limit, reconfigure a voice or bundle service plan, orpurchase a new voice or bundle service plan by communicating with aservice controller system to assist in changing a service plan statusassociated with the device credential, and the service controller systemis configured to provide a new voice service allowance policy to one ormore service processor agents on the device.

In some embodiments, during a voice call a service processor isconfigured to track real time voice service usage, communicate anindication of real time voice service usage to an earpiece, speaker orUI connected to the device, and provide the user with a voice serviceupgrade or purchase offer before the voice call expires. In someembodiments, the indication is provided when a pre-configured limit isreached. In some embodiments, the pre-configured limit is set by a userof the device on the device UI. In some embodiments, the pre-configuredlimit (and possibly other aspects of the notification) is provided by anetwork element or configured in the software of the device. In someembodiments, when the user responds to the upgrade offer indicating auser desire to purchase the upgrade, the service processor increases avoice allowance implemented by one or more device service processoragent (such as a policy control agent, a policy decision agent, a policyimplementation agent, or policy enforcement agent, or a combination ofthese). In some embodiments, the service processor also communicates theservice plan purchase to a network element such as a service purchaseserver, a service controller, an activation server or a billing server.

FIG. 52 illustrates a system configuration 1570 in accordance with someembodiments. In some embodiments, Master Device 100A and SecondaryDevice 100B interact with Sign-Up Request Processor 9002 (via DeviceAgents 9006A and 9006B) to manage plan sharing. In some embodiments,Sign-Up Request Processor 9002 interacts with Subscriber ManagementSystem 9004 to complete a requested function. In some embodiments,Subscriber Management System 9004 acts as the single interface point forSign-Up Request Processor 9002, and Sign-Up Request Processor 9002directs all of its queries and requests through Subscriber ManagementSystem 9004. In some embodiments, Sign-Up Request Processor 9002 makes“high level” requests to Subscriber Management System 9004 (e.g., add asecondary device subscriber to a master service account, device group,or multi-device service plan, etc.) and Subscriber Management System9004 converts the “high level” request into a series of “low level”requests and workflows to the various elements needed to complete therequested action. In this manner, a service operator can make necessarychanges to the “low level” processing while keeping the interface at the“high level” consistent. It also enables the service operator to supporta multi-vendor configuration without having to expose the low-levelrequests and workflow details to Sign-Up Request Processor 9002. In someembodiments, Sign-Up Request Processor 9002 is a component of SubscriberManagement System 9004.

In some embodiments, such as the embodiment illustrated in FIG. 52,Permissions element 9012 verifies that the requestor (e.g., masterdevice subscriber) has the appropriate account permissions to initiatean action (e.g., request a subscriber be added to a master serviceaccount, device group, or multi-device service plan, remove a subscriberfrom a master service account, device group, or multi-device serviceplan, set quota and sharing limits for secondary device subscribers,etc.). Additionally, in some embodiments, Provisioning element 9014 isresponsible for provisioning the required elements based on actionsrequested by Sign-Up Request Processor 9002 (e.g., add a secondarydevice subscriber, remove a secondary device subscriber, set a quota fora Master or secondary device subscriber, set a notification policy for aMaster or secondary device subscriber, adjust a curfew, etc.). In someembodiments, when a request is made to Provisioning 9014 by Sign-UpRequest Processor 9002, Provisioning 9014 validates a credential toensure that the requestor has the authority to perform the action (e.g.,master device subscriber can add a user, secondary device subscriber canconfigure notifications, etc.). Additionally, in some embodiments,Provisioning 9014 provisions Permissions 9012 with updated account orsubscriber level permissions (e.g., add or remove a subscriber from ashared account, grant or revoke certain account-level permissions to asecondary device subscriber, grant or revoke certain subscriber-levelpermissions to a secondary device subscriber, etc.). In someembodiments, Provisioning 9014 also provisions Policy Management (PolicyMgmt) element 9016 to set appropriate quotas, restrictions, events tomonitor (e.g., attempting to perform an action that is not allowedeither at the plan level or based on limits/restrictions set by themaster device subscriber that would then trigger a notification alert,etc.), etc. In some embodiments, Provisioning 9014 provisions UsageAccounting element 9018 with service plans associated with the account(shared and non-shared plans) and the subscriber IDs that are sharingthe plans. In some embodiments, Usage Accounting 9018 is provisioned viaa third party (e.g., device OEM, OS provider, retail partner, VSP, MVNO,etc.) server. In some embodiments, Usage Accounting 9018 is provisionedfrom a device agent (e.g., Device Agent 9006A or 9006B). In someembodiments, Usage Accounting 9018 is provisioned with rules regardingwhich services are free to the subscriber and which are not (e.g.,sponsored services, carrier administration traffic, special phonenumbers (e.g., 611, 911, operator customer support, retail partner,sponsored service partner, etc.)). In some embodiments, Usage Accounting9018 is configured to report usage to a device agent on the subscriberdevices (e.g., Device Agent 9006A on Master Device 100A or Device Agent9006B on Secondary Device 100B). In some embodiments, the usage datainformation delivered to the device agent includes detailed usageinformation for each device associated with the master service account,device group, or multi-device service plan. In some embodiments, theusage information delivered to or displayed on the device is differentfor the master subscriber and the child (i.e., secondary) subscriber.For example, in some embodiments, the master subscriber can view totalplan usage, his own usage and usage by subscriber associated with theshared plan, while the child subscriber can only view his own usage.

In some embodiments, Usage Accounting 9018 and Policy Management 9016interwork to meet a service policy objective (e.g., when usage within aservice plan for a specific secondary device subscriber hits a certainusage level, block further access to that service plan for thatsecondary device). In some embodiments, Provisioning 9014 alsoprovisions Notification element 9020 with the details aboutnotifications that need to be delivered to subscribers based on certainevents. In some embodiments, these details include triggeridentification, notification text, and actions. In some embodiments,these details include other instructions that instruct Notification 9020(and, in some embodiments, a device agent such as Device Agent 9006A or9006B) on further workflow associated with a notification (e.g., anotification trigger identification that indicates that a service planlimit has been reached, the text to be shown to the subscriber when thecondition occurs, the buttons to display on the notification (e.g.,dismiss, purchase additional service, view product catalog, “snooze,”“don't remind me again,” etc.), and the action to take when specificbuttons are selected (e.g., when the user selects “don't remind meagain,” show these choices for when to remind him again (e.g., never, 1hour, 2 hours, 4 hours, etc.)).

In some embodiments, the elements illustrated in FIG. 52 are located inthe network. In some embodiments, the elements in FIG. 52 are located onthe subscriber device (e.g., Master Device 100A or Secondary Device100B). In some embodiments, some of the elements in FIG. 52 are locatedin the subscriber device, and some of the elements are located in thenetwork.

In some embodiments, the elements in FIG. 52 work in a coordinatedmanner. For example, in some embodiments, notifications are triggeredwhen certain policy events (managed by Policy Management 9016) orcertain usage thresholds (managed by Usage Accounting 9018) occur. Aswould be appreciated by a person having ordinary skill in the art, thereare many combinations of interworking between network elements that willachieve the desired coordinated events. Additionally, although FIG. 52illustrates the elements as separate entities, the elements can becombined or further divided as appropriate for the particularimplementation.

In some embodiments, a network system is configured to provision amulti-device service plan access network permission configuration intoone or more access network permission control elements, the permissionconfiguration allowing access network service permission in accordancewith a multi-device service plan for at least Master Device 100A andSecondary Device 100B. In some embodiments, the provisioning of thesecondary device service permissions is accomplished by providing asecondary device credential and service permission information to asubscriber management system that configures a set of one or morewireless access network permissions on one or more wireless accessnetwork access control elements, the one or more wireless access networkpermissions comprising access control permissions for attempted oractual access traffic associated with the secondary device credential.In some embodiments, the one or more access network permission controlelements comprise one or more device agents (e.g., Device Agent 9006B)located on Secondary Device 100B. In some embodiments, the one or moredevice agents comprise a service processor (e.g., service processor115). In some embodiments, the one or more access network permissioncontrol elements comprise a subscriber management system (e.g.,Subscriber Management System 9004). In some embodiments, the one or moreaccess network permission control elements comprise a service controller(e.g., service controller 122). In some embodiments, the one or moreaccess network permission control elements comprise a network AAAsystem. In some embodiments, the one or more access network permissioncontrol elements comprise one or more of a network gateway, router,policy control enforcement function, gateway GPRS support node (GGSN),serving GPRS support node (SGSN), packet data serving node (PDSN), homelocation register (HLR), home subscriber server (HSS), packet datanetwork gateway (PGW), serving gateway (SGW), traffic monitoringfunction, deep packet inspection (DPI) function, or home agent.

In some embodiments, Sign-Up Request Processor 9002 is located in thecarrier network. In other embodiments, it is located in a third partyprovider network (e.g., device OEM, VSP, MVNO, device OS provider, VoIPprovider, etc.).

It is sometimes desirable that a common application programminginterface (API) be implemented to simplify or eliminate the details ofwhat has to happen in one or more carrier networks, and to establish afinite set of pre-specified API commands to support a commonmulti-device service plan assignment system that works with a pluralityof third-party on-device multi-device service plan sharing andassignment solutions. In some embodiments, the pre-specified APIcommands include such actions as activate a device 100 onto a sharedplan, add a device 100 to a master service account, device group, ormulti-device service plan, remove a device 100 from a master serviceaccount, device group, or multi-device service plan, manage quotas fordevices 100 on a shared plan, manage notifications for devices 100 on ashared plan, or assign specific plans to certain devices 100 on a sharedplan. As would be appreciated by a person having ordinary skill in theart, there are many types actions that can be defined, and the examplesprovided herein are not intended to be limiting.

In some embodiments, such as the embodiment illustrated in FIG. 53,there is one Sign-Up Request Processor 9002 that interconnects withmultiple service operators via Common API 9022. Specifying a common APIenables Sign-Up Request Processor 9002 to add new service operators(e.g., Service Operator #1, Service Operator #N) without having toimplement new interfaces to support the new service operators. In someembodiments, the subscriber has a common sign-up experience regardlessof his service operator. This allows a third party (e.g., device OEM,VSP, MVNO, device OS provider, VoIP provider, etc.) to define a userinterface (UI) and process and implement that UI once in Sign-Up RequestProcessor 9002 and/or Device Agent 9006 to enable the third party tooffer a common experience across all of the service operators that itinterworks with.

For example, a device manufacturer may want to have a common servicesign-up and sharing management UI and process for all of its productsand desires that the common service sign-up and sharing management UIand process are implemented consistently across all of the serviceoperators that are selling the manufacturer's products. Thus, in someembodiments, the device manufacturer provides Sign-Up Request Processor9002 and Common API 9022 and works with the service operators to havethem implement the required functionality to support the on-deviceservice sign-up and multi-device sharing functions. In some embodiments,the manufacturer implements, on Sign-Up Request Processor 9002, commonAPIs (e.g., Common API 9022) for functions like add new service, deleteservice, add a device 100 to a master service account, device group, ormulti-device service plan, delete a device 100 from a master serviceaccount, device group, or multi-device service plan, manage quotas on ashared plan, etc., and then provide a well-defined API, interface, andprotocol (e.g., JSON, WSDL, etc.) to the interface with the individualservice operators. In some embodiments, the interface protocol betweenSign-Up Request Processor 9002 and the service operator SubscriberManagement System 9004 is a “high level” functional interface asdescribed above, and Subscriber Management System 9004 implements aseries of “low level” instructions to each of the affected operatorelements (as described in the discussion of FIG. 53). In someembodiments, the subscribers sharing a service plan must be subscribedto the same service operator. In some embodiments where a centralizedaccounting function is implemented, the subscribers may be, but need notbe, subscribed to different service operators, and the centralizedaccounting function tracks, manages and aggregates the service usage ofall of the devices sharing the shared plan across all of the serviceoperators. By leveraging a single sign-up request processor, Sign-UpRequest Processor 9002 brokers the multi-device plan sharing, managementand assignment requests across the different service operators.

FIG. 53 illustrates a system configuration including a network thatdevices 100 can use to communicate with Sign-Up Request Processor 9002in accordance with some embodiments. In some embodiments, the network isa common network regardless of the service operator that the subscriberis subscribed to. In other embodiments, each service operator uses itsown network to enable the device to connect to Sign-Up Request Processor9002. In some embodiments, network 9008 is a cellular network. In someembodiments, network 9008 is a Wi-Fi network. In some embodiments,network 9008 is a Wi-Fi network for one device and a cellular networkfor the other device.

In some embodiments, Sign-Up Request Processor 9002 is located in thecarrier network. In other embodiments, Sign-Up Request Processor 9002 islocated in a third-party provider network (e.g., device OEM, VSP, MVNO,device OS provider, VoIP provider, etc.). In some embodiments, there isa plurality of Sign-Up Request Processors 9002. In some embodiments,each of the plurality of Sign-Up Request Processors 9002 conforms to thecommon API command set. In some embodiments, each of the plurality ofSign-Up Request Processors 9002 is associated with a subset of theentities requiring access to manage multi-device plan sharing andassignment. In some embodiments, these entities include device OEM, OSprovider, VSP, MVNO, MNO, retail distribution partners, or sponsoredservice providers. In some embodiments, each of the entities requiringaccess to manage multi-device plan sharing and assignment implements itsown UI, device agent, and on-device workflows to enable the entity tocustomize the process to suit its needs without impacting the serviceoperator interfaces.

Although FIG. 53 illustrates Common API 9022 coupled with Sign-UpRequest Processor 9002, in some embodiments, Common API 9022 is definedby each service operator (e.g., MNO, MVNO, VSP, etc.) and is coupledwith each service operator's Subscriber Management System 9004. In someembodiments, Sign-Up Request Processor 9002 conforms to each serviceoperator's API specification. In some embodiments, the service operatorAPI exposes the “high level” requests (e.g., add subscriber to a masterservice account, device group, or multi-device service plan, removesubscriber from a master service account, device group, or multi-deviceservice plan, allocate quotas, add curfew, remove curfew, addnotification, delete notification, etc.) to Sign-Up Request Processor9002 and then converts the “high level” commands into the appropriate“low level” commands and workflow specific to that service operator.

In some embodiments, a party specifies a global API that defines asuperset of required “high level” commands that entities use to managemulti-device plan sharing capabilities and then provide an internalframework to allow the individual service operators to convert the “highlevel” commands received from Sign-Up Request Processor 9002 into theservice operator-specific “low level” commands and workflows that applyto that service operator. In some embodiments, the party is an operator,a VSP, an MVNO, an OEM, an OS provider, a retail distribution partner,or any type of partner that would benefit from a consistent multi-deviceservice management experience across multiple service providers.

Device Credentials

In some embodiments, device 100 comprises one or more wireless modemsthat enable the device to connect to at least a first wireless networkand one or more device agents (e.g., Device Agent 9006) that: obtain afirst device credential from a device credential storage element, thefirst device credential uniquely identifying device 100; present amulti-device service plan sign-up message through a user interface ofdevice 100, the multi-device service plan sign-up message offering theuser an option to associate device 100 with a master service account,device group, or multi-device service plan, the master service account,device group, or multi-device service plan comprising access servicepermissions to enable communication over the first wireless network byone or more devices; obtain a user input indicating that the userdesires to associate device 100 with the master service account, devicegroup, or multi-device service plan; and communicate the first devicecredential and the user input to a network element responsible forassociating device 100 with the master service account, device group, ormulti-device service plan.

In some embodiments, device 100 receives an acknowledgment that device100 was successfully associated with the master service account, devicegroup, or multi-device service plan. In some embodiments, device 100receives the acknowledgment from a network element and presents theacknowledgment through a device user interface.

In some embodiments, device 100 receives an instruction that assists inassociating device 100 with the master service account, device group, ormulti-device service plan. In some embodiments, device 100 receives thatinstruction from a network element and executes the instruction toassist in associating device 100 with the master service account, devicegroup, or multi-device service plan. In some embodiments, theinstruction modifies an aspect of a device connection to the firstwireless network. In some embodiments, the instruction modifies anaspect of a device access permission associated with communicating overthe first wireless network. In some embodiments, the instructionmodifies an aspect of a first device credential or a second devicecredential.

In some embodiments, the first device credential comprises one or moreof a phone number, an IMSI, an MSID, a SIM identifier, an ESN, an MEID,an IMEI, a device identifier, a subscriber identifier, a service accountidentifier, a token, and a one-time token.

In some embodiments, at least a portion of the service plan sign-upmessage is obtained from a device system memory. In some embodiments,the at least a portion of the service plan sign-up message is pre-storedin the device system memory before the service plan sign-up messagedisplay sequence is initiated. In some embodiments, at least a portionof the service plan sign-up message is obtained from a networkdestination. In some embodiments, the at least a portion of the serviceplan sign-up message is obtained from a network element before theservice plan sign-up message display sequence is initiated. In someembodiments, the at least a portion of the service plan sign-up messageis obtained from a network element immediately prior to the service plansign-up message display sequence being initiated. In some embodiments,the network element comprises a website, a portal, or a message server.

In some embodiments, device 100 obtains at least a portion of theservice plan sign-up message from a push message sent by a networkserver. In some embodiments, the network server is a push server. Insome embodiments, device 100 receives the push message over a securepush message control link. In some embodiments, device 100 assists insecuring the push message control link by sharing the first devicecredential with a push message server and establishing an encrypted linkin cooperation with the push message server.

In some embodiments, a network system receives a secondary devicemulti-device service plan sign-up request from a device agent (e.g.,Device Agent 9006B) on Secondary Device 100B. In some embodiments, themulti-device service plan sign-up request comprises a master usercredential and a secondary device credential. In some embodiments, thenetwork system compares the master user credential to an account ownercredential associated with a master service account, device group, ormulti-device service plan. In some embodiments, if the comparisonindicates that the master user credential and the account ownercredential are consistent, the network system provides a provisioninginstruction to a wireless access network control system to associateSecondary Device 100B with access control permissions associated withthe master service account, device group, or multi-device service plan.

In some embodiments, a network system receives a secondary devicemulti-device service plan sign-up request from a device agent (e.g.,Device Agent 9006B) on Secondary Device 100B. In some embodiments, themulti-device service plan sign-up request comprises a master usercredential and a secondary device credential. In some embodiments, thenetwork system compares the master user credential to an account ownercredential associated with a master service account, device group, ormulti-device service plan. In some embodiments, if the comparisonindicates that the master user credential and the account ownercredential are consistent, the network system provides a provisioninginstruction to a wireless access network accounting system to accountservice usage associated with Secondary Device 100B to the masterservice account.

Sign-Up Requests

In some embodiments, a master device (e.g., Master Device 100A)comprises one or more device agents (e.g., Device Agent 9006A) thatreceive a multi-device sign-up option message or request message from anetwork element to add Secondary Device 100B to a master serviceaccount, device group, or multi-device service plan. In someembodiments, the one or more agents present the multi-device sign-upoption message or request message to a user through a user interface ofthe master device. In some embodiments, the one or more agents obtain auser response through the user interface and send the user response tothe network element. In some embodiments, the user response comprises amaster account-holder credential and an acknowledgment of the request toadd Secondary Device 100B to the master service account, device group,or multi-device service plan. In some embodiments, the master devicealso sends a master device credential to the network element, the masterdevice credential uniquely identifying the master device. In someembodiments, the master device communicates with the network elementover a secure link. In some embodiments, the master device receives themulti-device sign-up option message or request message request from thenetwork element over the secure link. In some embodiments, the securelink comprises a secure push message link, and the master devicereceives the message over the secure link by receiving a push messagefrom a network push message server. In some embodiments, the masterdevice assists in securing the secure push message link by executing alink establishment process during which the master device shares amaster credential with the network push message server and, incooperation with the network push message server, establishes anencrypted link.

In some embodiments, a network system receives a secondary devicemulti-device service plan sign-up option response message or requestmessage from a device agent (e.g., Device Agent 9006B) on SecondaryDevice 100B. In some embodiments, the network system communicatesinformation about the secondary device multi-device service plan sign-upoption response message or request message to a master device agent on amaster device (e.g., Device Agent 9006A on Master Device 100A). In someembodiments, the network system obtains a response to the informationabout the secondary device multi-device service plan sign-up optionresponse message or request message from the master device agent. Insome embodiments, if the response indicates that the secondary deviceservice plan sign-up option response or request is granted oracknowledged, the network system provides a provisioning instruction toa wireless access network control system to associate Secondary Device100B with access control permissions associated with the master serviceaccount, device group, or multi-device service plan. In someembodiments, the network system also receives a device credential fromthe master device in association with the response. In some embodiments,the network system includes a secure message link server thatcommunicates the information about the secondary device multi-deviceservice plan sign-up option response message or request message to themaster device agent. In some embodiments, the network system includes anetwork push message server and the secure link comprises a secure pushmessage link, and the network system communicates the information aboutthe secondary device multi-device service plan sign-up option responsemessage or request message to the master device agent by sending a pushmessage from a network push message server. In some embodiments, thenetwork system secures the network push message server by executing apush message link establishment process in which the network pushmessage server obtains a device credential and, in cooperation with themaster device, establishes an encrypted link.

In some embodiments, a network system receives a secondary devicemulti-device service plan sign-up option response message or requestmessage from a device agent (e.g., Device Agent 9006B) on SecondaryDevice 100B. In some embodiments, the network system communicatesinformation about the secondary device multi-device service plan sign-upoption response message or request message to a master device agent on amaster device (e.g., Device Agent 9006A on Master Device 100A). In someembodiments, the network system obtains a response to the informationabout the secondary device multi-device service plan sign-up optionresponse message or request message from the master device agent. Insome embodiments, if the response indicates that the secondary deviceservice plan sign-up option response or request is granted oracknowledged, the network system provides a provisioning instruction toa wireless access network accounting system to account service usageassociated with Secondary Device 100B to the master service account. Insome embodiments, the network system also receives a device credentialfrom the master device in association with the response. In someembodiments, the network system includes a secure message link serverthat communicates the information about the secondary devicemulti-device service plan sign-up option response message or requestmessage to the master device agent. In some embodiments, the networksystem includes a network push message server and the secure linkcomprises a secure push message link, and the network systemcommunicates the information about the secondary device multi-deviceservice plan sign-up option response message or request message to themaster device agent by sending a push message from a network pushmessage server. In some embodiments, the network system secures thenetwork push message server by executing a push message linkestablishment process in which the network push message server obtains adevice credential and, in cooperation with the master device,establishes an encrypted link.

In some embodiments, Secondary Device 100B comprises one or more deviceagents (e.g., Device Agent 9006B) that receive a request from a networkelement to add Secondary Device 100B to a master service account, devicegroup, or multi-device service plan. In some embodiments, the one ormore agents present the multi-device sign-up option message or requestmessage to a user through a user interface of Secondary Device 100B. Insome embodiments, the one or more agents obtain a user response throughthe user interface and send the user response to the network element. Insome embodiments, the user response comprises a master account-holdercredential and an acknowledgment of the request to add Secondary Device100B to the master service account, device group, or multi-deviceservice plan. In some embodiments, the response comprises a credentialassociated with a user of Secondary Device 100B and an acknowledgment ofthe request to add Secondary Device 100B to the master service account,device group, or multi-device service plan. In some embodiments,Secondary Device 100B sends a secondary device credential to the networkelement in association with the response. In some embodiments, SecondaryDevice 100B communicates with the network element over a secure link. Insome embodiments, the master device (e.g., Master Device 100A) receivesthe request from the network element over the secure link. In someembodiments, the secure link comprises a secure push message link, andthe master device receives the request over the secure link by receivinga push message from a network push message server. In some embodiments,the master device assists in securing the secure push message link byexecuting a link establishment process during which the master deviceshares a master credential with the network push message server and, incooperation with the network push message server, establishes anencrypted link.

In some embodiments, a network system receives a secondary devicemulti-device service plan sign-up request from a master device agent(e.g., Device Agent 9006A) on a master device (e.g., Master Device100A). In some embodiments, the network system communicates informationabout the secondary device multi-device service plan sign-up request toa device agent (e.g., Device Agent 9006B) on Secondary Device 100B. Insome embodiments, the network system obtains a response to theinformation about the secondary device multi-device service plan sign-upoption request from device agent on the secondary device (e.g., DeviceAgent 9006B). In some embodiments, if the response indicates that thesecondary device service plan sign-up option request is granted oracknowledged, the network system provides a provisioning instruction toa wireless access network control system to associate Secondary Device100B with access control permissions associated with the master serviceaccount, device group, or multi-device service plan. In someembodiments, the network system is further configured to obtain a devicecredential associated with the master device in association with therequest. In some embodiments, the network system is further configuredto obtain a device credential associated with Secondary Device 100B inassociation with the response. In some embodiments, the network systemincludes a secure message link server that communicates the informationabout the secondary device multi-device service plan sign-up request tothe device agent on Secondary Device 100B (e.g., Device Agent 9006B). Insome embodiments, the network system includes a network push messageserver and the secure link comprises a secure push message link, and thenetwork system communicates the information about the secondary devicemulti-device service plan sign-up request to the device agent onSecondary Device 100B by sending a push message from a network pushmessage server. In some embodiments, the network system secures thenetwork push message server by executing a push message linkestablishment process in which the network push message server obtains adevice credential and, in cooperation with Secondary Device 100B,establishes an encrypted link.

In some embodiments, a network system receives a secondary devicemulti-device service plan sign-up request from a master device agent ona master device (e.g., Device Agent 9006A on Master Device 100A). Insome embodiments, the network system communicates information about thesecondary device multi-device service plan sign-up request to a deviceagent (e.g., Device Agent 9006B) on Secondary Device 100B. In someembodiments, the network system obtains a response to the informationabout the secondary device multi-device service plan sign-up requestfrom the device agent on Secondary Device 100B. In some embodiments, ifthe response indicates that the secondary device service plan sign-uprequest is granted or acknowledged, the network system provides aprovisioning instruction to a wireless access network accounting systemto account service usage associated with Secondary Device 100B to themaster service account. In some embodiments, the network system obtainsa device credential associated with the master device in associationwith the response. In some embodiments, the network system obtains adevice credential associated with Secondary Device 100B in associationwith the response. In some embodiments, the network system includes asecure message link server that communicates the information about thesecondary device multi-device service plan sign-up option responsemessage or request message to the master device agent (e.g., DeviceAgent 9006A). In some embodiments, the network system includes a networkpush message server and the secure link comprises a secure push messagelink, and the network system communicates the information about thesecondary device multi-device service plan sign-up option responsemessage or request message to the master device agent by sending a pushmessage from a network push message server. In some embodiments, thenetwork system secures the network push message server by executing apush message link establishment process in which the network pushmessage server obtains a device credential and, in cooperation withMaster Device 100A, establishes an encrypted link.

In some embodiments, Master Device 100A comprises one or more deviceagents (e.g., Device Agent 9006A) that present a user interface messageoffering to associate Secondary Device 100B with a master serviceaccount, device group, or multi-device service plan. In someembodiments, the one or more device agents obtain an affirmative userresponse to the user interface message. In some embodiments, the one ormore device agents obtain a secondary device credential and send anindication of the affirmative user response and the secondary devicecredential to a network element. In some embodiments, the one or moredevice agents obtain the secondary device credential from a user inputobtained through the master device user interface. In some embodiments,the one or more device agents obtain secondary device credential bycommunicating with Secondary Device 100B through, for example, the firstwireless network, Bluetooth, near-field communication, an objectpresented on the secondary device user interface and captured by MasterDevice 100A (for example, by a camera), an encoded sound signal, etc. Insome embodiments, the one or more device agents obtain a user credentialand send the user credential to the network element. In someembodiments, the one or more device agents obtain a master devicecredential and send the master device credential to the network element.In some embodiments, the one or more device agents obtain an indicationof a user-established limit on service usage for Secondary Device 100B.In some embodiments, the one or more device agents send informationabout the user-established limit on service usage to the networkelement. In some embodiments, the one or more device agents obtain auser-established permission level associated with Secondary Device 100B.In some embodiments, the one or more device agents send informationabout the user-established permission level to the network element. Insome embodiments, the one or more device agents obtain at least aportion of the user interface message offering to associate SecondaryDevice 100B with a master service account, device group, or multi-deviceservice plan from memory on the master device. In some embodiments, theone or more device agents obtain at least a portion of the userinterface message offering to associate Secondary Device 100B with amaster service account, device group, or multi-device service plan froma network element. In some embodiments, the network element is a websiteor a portal.

In some embodiments, a device (e.g., Master Device 100A or SecondaryDevice 100B) comprises one or more agents (e.g., Device Agent 9006A,9006B) that present a user interface message offering an option toprovide monetary credit (e.g., money or an equivalent) to SecondaryDevice 100B. In some embodiments, the one or more agents accept a userresponse to the offer and provide the user response to a network element(e.g., by sending the user response to the network element).

In some embodiments, a network system communicates over a secure linkwith a master device agent on a master device (e.g., Device Agent 9006Aon Master Device 100A). In some embodiments, the network system obtainsa request to provide monetary credit to Secondary Device 100B. In someembodiments, the request includes a master user credential and asecondary credential identifying the secondary device. In someembodiments, the network system determines if the master user credentialis associated with the secondary credential, and, if it is, the networksystem provisions a monetary accounting system to provide monetarycredit to Secondary Device 100B.

In some embodiments, a device (e.g., Master Device 100A or SecondaryDevice 100B) comprises one or more agents (e.g., Device Agent 9006A,9006B) configured to present a user interface (UI) message offering anoption to provide access usage credit to Secondary Device 100B, accept auser input in response to the offer, and communicate the user input to anetwork element.

In some embodiments, a network system communicates over a secure linkwith a master device agent on a master device (e.g., Device Agent 9006Aon Master Device 100A). In some embodiments, the network system obtainsa request to provide service usage credit to Secondary Device 100B. Insome embodiments, the network system obtains the request from the masterdevice agent over the secure link. In some embodiments, the networksystem obtains a master user credential and a secondary devicecredential associated with the request and determines if the master usercredential is associated with the secondary device credential. In someembodiments, if the master user credential is associated with thesecondary device credential, the network system provisions a serviceusage accounting system to provide service usage credit to SecondaryDevice 100B.

In some embodiments, a device 100 comprises one or more agentsconfigured to present a user interface (UI) message offering an optionto provide control of at least an aspect of a secondary device servicepermission level, obtain a user response to the offer, and communicatethe user response to a network element.

In some embodiments, a network system communicates over a secure linkwith a master device agent on a master device (e.g., Device Agent 9006Aon Master Device 100A). In some embodiments, the network system obtainsa request to control at least an aspect of a secondary device servicepermission level. In some embodiments, the network system obtains therequest from the master device agent over the secure link. In someembodiments, the network system obtains a master user credential and asecondary device credential associated with the request and determinesif the master user credential is associated with the secondary devicecredential. In some embodiments, if the master user credential isassociated with the secondary device credential, the network systemprovisions a service permission control system to control the at leastan aspect of the secondary device service permission level.

In some embodiments, a device system comprises one or more agentsconfigured to present a user interface (UI) message offering an optionto deny at least an aspect of a secondary device service permissionlevel, obtain a user response to the offer, and communicate the userresponse to a network element.

In some embodiments, a network system communicates over a secure linkwith a master device agent on a master device (e.g., Device Agent 9006Aon Master Device 100A). In some embodiments, the network system obtainsa request to deny at least an aspect of a secondary device servicepermission level. In some embodiments, the network system obtains therequest from the master device agent over the secure link. In someembodiments, the network system obtains a master user credential and asecondary device credential associated with the request and determinesif the master user credential is associated with the secondary devicecredential. In some embodiments, if the master user credential isassociated with the secondary device credential, the network systemprovisions a service permission control system to deny the at least anaspect of the secondary device service permission level.

In some embodiments, a network system configures a notificationregarding a secondary device usage level, wherein the notification is tobe delivered to Master Device 100A. In some embodiments, the networksystem configures a usage level setting based on information from MasterDevice 100A. In some embodiments, the network system configures theusage level setting based on information from a website or portal. Insome embodiments, the network system configures the usage level settingas part of a service plan provisioning interface.

In some embodiments, the usage level is associated with voice usage. Insome embodiments, the voice usage is expressed in units of minutes. Insome embodiments, the voice usage is expressed as a percentage of planlimit. In some embodiments, voice usage is expressed as a percentage ofan allowance.

In some embodiments, the usage level is associated with text or SMSusage. In some embodiments, the text or SMS usage is expressed as anumber of texts or SMS messages. In some embodiments, text or SMS usageis expressed as an object count. In some embodiments, text or SMS usageis expressed as a number of megabytes (MB). In some embodiments, text orSMS usage is expressed as a percentage of a plan limit. In someembodiments, a text or SMS usage is expressed as a percentage of anallowance (e.g., an allowance under a shared plan).

In some embodiments, the usage level is associated with data usage. Insome embodiments, the data usage is expressed as an amount of data(e.g., measured in megabytes, kilobytes, etc.). In some embodiments, thedata usage is expressed as an amount of time. In some embodiments, thedata is expressed as a percentage of a plan limit. In some embodiments,the data is expressed as a percentage of an allowance (e.g., anallowance under a shared plan).

In some embodiments, the usage level is for classification of data(e.g., a category of service activities less than all service activitiesavailable to device 100). In some embodiments, the data classificationusage expressed in MB. In some embodiments, the data classification isexpressed as a usage during a period of time. In some embodiments, thedata classification is expressed as a percentage of a plan limit. Insome embodiments, the data classification is expressed as a percentageof an allowance (e.g., an allowance under a shared plan). In someembodiments, the classification of data is for one or more applications.In some embodiments, the classification is for one or more network endpoints. In some embodiments, the classification is for one or more voiceservices. In some embodiments, the classification is for one or moretext messages or messaging services. In some embodiments, theclassification is for one or more content types. In some embodiments,the classification is for roaming services (e.g., service usage whileroaming, such as number of voice minutes used while roaming, amount ofdata used while roaming, etc.). In some embodiments, the classificationis for home cellular network services (e.g., service usage while on ahome cellular network, such as number of voice minutes used whileroaming, amount of data used while roaming, etc.). In some embodiments,the classification is for Wi-Fi services (e.g., service usage while onone or more Wi-Fi networks, such as number of voice minutes used whileon Wi-Fi networks, amount of data used while on Wi-Fi networks, etc.).In some embodiments, the classification is for one or morequality-of-service (QoS) levels or one or more QoS types. In someembodiments, the classification is for one or more traffic or contenttypes (e.g., service usage for streaming video, service usage forstreaming audio, service usage for a particular protocol, etc.). In someembodiments, the classification is for one or more time periods (e.g.,service usage during the past day, week, month, etc.). In someembodiments, the classification is for one or more geographic areas orphysical locations (e.g., service usage in Santa Clara County, serviceusage at the office, service usage at home, etc.). In some embodiments,classification is for one or more application types (e.g., service usageassociated with user applications, service usage associated with socialnetworking applications, service usage associated with videoapplications, etc.). In some embodiments, the classification is for oneor more websites. In some embodiments, the classification is for one ormore website types. In some embodiments, the classification is for oneor more of categories of service usage, such as, for example, voice,text, data, gaming, video, browsing, chat, shopping, maps, audio, etc.

In some embodiments, a master device (e.g., Master Device 100A)comprises one or more agents (e.g., Device Agent 100A) configured toreceive a child usage level message and present information about thechild usage levels through a master device user interface (UI).

In some embodiments, a network system compares a pre-determinedsecondary device service usage limit with a measured secondary deviceservice usage level associated with a secondary device (e.g. SecondaryDevice 100B) associated with a secondary device credential. In someembodiments, the network system determines if the measured secondarydevice service usage level exceeds the pre-determined secondary deviceservice usage limit. In some embodiments, if the limit is exceeded, thenetwork system obtains (e.g., configures, retrieves, etc.) a secondarydevice service usage message associated with the secondary deviceservice usage limit. In some embodiments, the network system determinesa master device credential of a master device (e.g., Master Device 100A)that is associated with the secondary device and sends the secondarydevice service usage message to a master device agent (e.g., DeviceAgent 9006A) on the master device identified by the master devicecredential.

In some embodiments, a master device (e.g., Master Device 100A)comprises one or more agents (e.g., Device Agent 9006A) configured toreceive a child usage level message and present information from ordetermined based on the child usage level message through amaster-device user interface. In some embodiments, the child usage levelmessage indicates that the secondary device (e.g., Secondary Device100B) is out of usage allocation. In some embodiments, the child usagelevel message indicates that the secondary device is nearing a conditionwhere it will be out of usage allocation. In some embodiments, the oneor more agents also present an option to modify (e.g., increase ordecrease) secondary device usage permissions or limits. In someembodiments, the one or more agents accept a user response to the optionto modify the secondary usage permissions or limits. In someembodiments, the one or more agents send the user response to a networkelement.

In some embodiments, a network system determines a usage level for asecondary device (e.g., Secondary Device 100B). In some embodiments, thenetwork system determines if secondary device usage level satisfies apre-determined condition. In some embodiments, if the secondary deviceusage level satisfies the pre-determined condition, the network systemdetermines a master device (e.g., Master Device 100A) that is associatedwith the secondary device. In some embodiments, the network systemdetermines (e.g., configures, obtains, etc.) a secondary device usagelevel message associated with the pre-determined condition and sends thesecondary device usage level message to the master device. In someembodiments, the usage level message includes an option to increase ausage allowance for secondary device. In some embodiments, the networksystem also obtains a master user response to increase the secondarydevice usage allowance. In some embodiments, the network system receivesthe master user response from the master device. In some embodiments,the network system provisions one or more network elements to as neededto increase the secondary device usage allowance.

In some embodiments, the network system receives a secure request from amaster account holder to add a device (device 100) to a master serviceaccount, device group, or multi-device service plan. In someembodiments, the secure request comprises a master account holdercredential and a first device credential. In some embodiments, thenetwork system confirms the master account credential and, afterconfirming the master account credential, provisions a network accesssystem to provide the service usage or attempted service usage over afirst wireless access network that is associated with a first devicecredential to support the access permissions associated with the masterservice account, device group, or multi-device service plan. In someembodiments, the request to add device 100 to the master serviceaccount, device group, or multi-device service plan is obtained from adevice agent (e.g., Device Agent 9006) on device 100. In someembodiments, the request to add device 100 to the master serviceaccount, device group, or multi-device service plan is obtained from adevice agent on another device. In some embodiments, the request to adddevice 100 to the master service account, device group, or multi-deviceservice plan is obtained from a website or portal. In some embodiments,provisioning includes associating device 100 credential to the masterservice account, device group, or multi-device service plan. In someembodiments, provisioning includes de-assigning device 100 credentialfrom a pre-existing service plan. In some embodiments, accesspermissions include one or more permissions for categories of serviceusage established by the master account holder.

In some embodiments, a network system receives a secure request from amaster account holder to add a first device (device 100) to a masterservice account, device group, or multi-device service plan, the securerequest comprising a master account holder credential and a first devicecredential. In some embodiments, the network system confirms the masteraccount credential and provisions a network service usage accountingsystem to account service usage over a first wireless access networkthat is associated with device 100 credential to the master account. Insome embodiments, the request to add device 100 to the master serviceaccount, device group, or multi-device service plan is obtained from adevice agent located on device 100. In some embodiments, the request toadd device 100 to the master service account, device group, ormulti-device service plan is obtained from a device agent (e.g., DeviceAgent 9006) located on another device. In some embodiments, the requestto add device 100 to the master service account, device group, ormulti-device service plan is obtained from a website or portal. In someembodiments, provisioning includes associating device 100 credential tothe master service account, device group, or multi-device service plan.In some embodiments, provisioning includes de-assigning device 100credential from a pre-existing service plan. In some embodiments, therequest to add device 100 to the master service account, device group,or multi-device service plan is obtained from a device agent on device100. In some embodiments, the request to add device 100 to the masterservice account, device group, or multi-device service plan is obtainedfrom a device agent on another device (e.g., Device Agent 9006). In someembodiments, the request to add device 100 to the master serviceaccount, device group, or multi-device service plan is obtained from awebsite or portal. In some embodiments, provisioning includesassociating a first device credential to the master service account,device group, or multi-device service plan. In some embodiments,provisioning includes de-assigning the first device credential from apre-existing service plan. In some embodiments, access permissionsinclude one or more permissions for a category of service usageestablished by the master account holder.

In some embodiments, a network system obtains a secondary device accesscredit indication for a classification of service (e.g., a category ofservice usage) from a master device agent on a master device (e.g.,Device Agent 9006A on Master Device 100A) and provisions an accesscontrol system to provide access credit for the classification ofservice for a secondary device (e.g., Secondary Device 100B) from themaster device, the classification of service less than all servicesavailable to the secondary device. In some embodiments, theclassification is for one or more applications. In some embodiments, theclassification is for one or more network end points. In someembodiments, the classification is for one or more voice services. Insome embodiments, the classification is for one or more text messages.In some embodiments, the classification is for one or more contenttypes. In some embodiments, the classification is for roaming services.In some embodiments, the classification is for home cellular services.In some embodiments, the classification is for Wi-Fi services. In someembodiments, the classification is for one or more QoS levels or one ormore QoS types. In some embodiments, the classification is for one ormore traffic types. In some embodiments, the classification is for oneor more time periods. In some embodiments, the classification is for oneor more geographic areas or physical locations. In some embodiments, theclassification is for one or more application types. In someembodiments, the classification is for one or more websites. In someembodiments, the classification is for one or more website types. Insome embodiments, the classification is for one or more of voice, text,data, gaming, video, browsing, chat, shopping, maps, audio, etc.

In some embodiments, a network system obtains a secondary device accesscredit indication for a classification of service from a master accountholder user interface (UI), the classification of service less than allservices available to device 100. In some embodiments, the masteraccount holder UI is located on a master device (e.g., Master Device100A). In some embodiments, the master account holder UI comprises awebsite.

Enhanced Curfews

In some embodiments, a master user (alternatively or in addition denotedherein as a subscriber, a manager user, user group master, an owner, oran account holder) manages (wherein “manages” comprises one or more of:sets, defines, controls, monitors, notifies, acknowledges) a curfew onat least a portion of a service plan (comprising one or more serviceactivities, such as browsing, texting, email, video streaming, etc., orother activities associated with one or more devices 100 and/or one ormore users (or subscribers) associated with the one or more devices 100,such as application or game usage) for one or more other devices 100associated with a device group (wherein the device group may be definedby a service plan, a service account, a shared allocation group, adevice agent grouping, device pairing, etc.), a user group, or both adevice group and a user group. In some embodiments, a master usermanages a curfew from a master device (e.g., Master Device 100A). Insome embodiments, a master user manages a curfew from a child orsecondary device (e.g., Secondary Device 100B) after sharing a masteruser credential. In some embodiments, the master user manages a curfewfrom a master device after sharing a master user credential. In someembodiments, the master user manages a curfew for a device associatedwith the master user, for example a master device. In some embodiments,the device group has more than one master user (e.g., both parents of afamily plan). In some embodiments, the curfew is based on the union ofthe more than one master user management. In some embodiments, thecurfew is based on the latest master user management. In someembodiments, the master users are organized by a hierarchy or by tiers,and the master user management is based on the hierarchy (e.g., oneparent of a family plan may set a curfew and the other parent of thefamily plan may or may not be allowed to override it).

FIG. 54 illustrates representative screen 9030, which illustratesexemplary information that may be presented on the master device (e.g.,Master Device 100A), in accordance with some embodiments, when asubscriber attempts to manage a curfew of one or more devices. Forexample, the “Master Device Curfew settings” may be managed from amaster device (e.g., Master Device 100A). In some embodiments, a usermay arrive at the “Master Device Curfew settings” from a device agentuser interface (UI). In some embodiments, a user may arrive at the“Master Device Curfew settings” from the master device settings or anapplication on the master device. In some embodiments, the “MasterDevice Curfew settings” may be a website, portal, etc. In someembodiments, the “Master Device Curfew settings” settings may bepresented to the master device from a network element. In the embodimentillustrated in FIG. 54, the master user may manage settings for threedevices: “Child Device A,” “Child Device B,” and “Master Device C.” Inthe embodiment illustrated in FIG. 54, each device may be managedindependently (e.g., by selecting a curfew setting from a dropdownmenu). In the embodiment illustrated in FIG. 54, the master user mayselect one of the following options: “None” (which may be associatedwith no curfew), “Dinner,” “Homework,” “School,” or “Sleeping.” In theembodiment illustrated in FIG. 54, the current selection for “ChildDevice A” is “Dinner,” the current selection for “Child Device B” is“Sleeping,” and the current selection for “Master Device C” is “None.”

In some embodiments, it may be more convenient for the curfew manager toselect a common selection for all the devices by setting “Select AllDevices” (e.g., if the whole family is having or about to have dinner, amaster user may select “Dinner” in the “Select All Devices” drop downmenu). In some embodiments, a master user selection may take place realtime (or alternatively in near-real time or quasi real-time). In someembodiments, real time includes the actions associated with the masteruser management taking effect within a few minutes of being set by themaster user. In some embodiments, real time includes the actionsassociated with the master user management taking effect in less than aminute after being set by the master user. In some embodiments, realtime includes the actions associated with the master user managementtaking effect in less than a few seconds after being set by the masteruser. In some embodiments, the master user selection takes place in realtime after the master user selects the “OK” button (e.g., through atouch screen or a voice command). In some embodiments, the “MasterDevice Curfew settings” menu (or alternatively: presentation, display,screen, window, or portal, etc.) may be used by a master user to checkthe curfew status of one or more devices. In some embodiments the“Master Device Curfew settings” presentation (or alternatively: display,screen, window, or portal, etc.) may be used by a master user to changea previously selected curfew status of one or more devices (or one ormore users). In some embodiments, the “Master Device Curfew settings”presentation (or alternatively: display, screen, window, or portal,etc.) may be used by a master user to end the curfew status of one ormore devices (e.g., by changing the selected setting for “Child DeviceA” from “Dinner” to “None” and selecting “OK,” or alternatively one ormore of: “Accept,” “Yes,” “Start,” “Curfew Now,” “Curfew Start,”“Time-out,” or “Time-out Now”).

In some embodiments, the master user desires to manage time events for acurfew. FIG. 55 illustrates a representative screen 9032, whichillustrates exemplary information that may be presented on the masterdevice (e.g., Master Device 100A), in accordance with some embodiments,when a subscriber attempts to manage a curfew with time events of one ormore devices. In the illustration of FIG. 55, the “Master Device Curfewwith time settings” menu allows the master user to select a “Start Time”and/or an “End Time.” In some embodiments, the “Start Time” is as soonas possible, current time, or real-time, as denoted by “Child DeviceA”-“Start Time” selection “Now.” In some embodiments, the “Start time”is delay/offset relative to current-time, as denoted by “Child DeviceB”-“Start Time” selection “In 5 min.” In some embodiments, a delayrelative to current-time could give the manager (or the child) some timeto prepare prior to the curfew enforcement. In some embodiments, one ormore of the managed device (e.g., one of both of the Child Device A orChild Device B) received a notification of the curfew selection. In someembodiments, one or more of the managed devices (e.g., one or both ofthe Child Device A or Child Device B) received a notification of thecurfew selection and the time event information. In the illustration ofFIG. 55, the “End Time” selection could be selected from a drop downmenu including set times (e.g., “In 30 min,” “None,” etc.). In someembodiments, the “End Time” selection could receive a master input froma UI (e.g., text, voice, etc.). In the illustration of FIG. 55, the Timeevents may be specified with a drag and place pointer (e.g., the “start”and “end” arrows managing the “Master Device C” time events managing thecurfew setting of “Homework”). In some embodiments, there are additionalmaster devices or additional child devices.

FIG. 56 illustrates representative screen 9034, which illustratesexemplary information that may be presented on a device to a masteruser, in accordance with some embodiments, when a master user attemptsto manage a curfew of one or more users associated with one or moredevices from a device group. In some embodiments, the master user ismanaging the curfew settings from a master device (e.g., Master Device100A). In some embodiments, the master user is managing the curfewsettings from a particular device from the device group after providingmaster user credentials. In some embodiments, the master user ismanaging the curfew settings from any device from the device group afterproviding master user credentials. In the embodiment illustrated in FIG.56, the master user may manage each of four users associated with thedevice group: “Child A,” “Child B,” “Parent C,” and “Me.” In theembodiment illustrated in FIG. 56, the master user is able to manage theusers' curfew activity. In this manner, if a device associated with thedevice group may be used by more than one user (e.g., a tablet shared byChild A and B, a shared IPTV, etc.) the curfew management could betargeted to the appropriate user. In the “Master user curfew setting”menu illustrated in FIG. 56, all the users have been placed in curfew“Dinner” mode by selecting the “Dinner” option in the “Select All.” Forthis example, this enables the master user to place all devicesassociated to the four users in the “Dinner” mode quickly and inreal-time. In some embodiments, a time event may be associated with theuser-based curfew setting (e.g., “Dinner” in 5 min or “Sleeping in 10min”). This may be more convenient when a user (e.g., Child A) has morethan one device (e.g., smartphone, tablet, game console, or TV). In someembodiments, the user associated with a device may be static or dynamic.In some embodiments, the user associated with the device may be based ona credential obtained from the user (e.g., password, PIN, etc.). In someembodiments, the user associated with the device may be recognized basedon a sensor signal obtained from the user (e.g., camera, voicerecognition, facial recognition, biometric data, etc.).

FIG. 57 illustrates representative screen 9036, illustrating exemplaryinformation that may be presented on a device to a master user, inaccordance with some embodiments, when a master user attempts to managea curfew of a first set of one or more devices from a device group andone or more users associated with a second set of one or more devicesfrom a device group. In some embodiments, the first set of one or moredevices and the second set of one or more devices may comprise one ormore common devices. In the illustration of FIG. 57, the master user mayindividually control any entity (device or user) within the set of twodevices (“Device A”, “Device B”) and three users (“Child A”, “Parent C”,“Me”). In some embodiments, a master user may not know the currentassociation between one or more users and one or more devices in thedevice group (e.g., the master user is in a different room in the housethan one or more other users, or the door to the room of one of theusers is closed, or the master user is not at home and one of thechildren to be “curfewed” is). In some embodiments, a combination ofdevice and user curfew management is more convenient or effective. Insome embodiments a user may be using more than one device simultaneously(e.g., texting on a smartphone while watching TV), or a device may havemore than one user (e.g., two users watching TV together). In theillustration of FIG. 57, the master user has selected the curfew option“Select All” to setting “None”, which could disable all curfew settingsto all five entities above. For example, the selection illustrated inFIG. 57 could be used to undo the selection illustrated in FIG. 56 afterdinner (or alternatively breakfast or lunch, etc.) activity has beencompleted.

FIG. 58 illustrates representative screen 9038, illustrating exemplaryinformation that may be presented on a device to a master user, inaccordance with some embodiments, when a master user attempts to managea curfew of one or more users associated with one or more devices from adevice group. In the illustration of FIG. 58, a master user may manage asubgroup of entities (for this example there are four entities named“Child A,” “Child B,” “Parent C,” and “Me,” which happen to be names ofusers, but could have been devices or a combination of users anddevices). In the illustration of FIG. 58, a select box is placed next toor adjacent to each entity (for other examples a touch of the name, or acolor, sorting the entities into two lists, separate drag and dropboxes, etc., could be used to select/separate/sort/classify one or moreentity from the group of entities) to identify which entities areassociated with the “Select group” curfew selection “Sleep.” In thisexample, “Child A” and “Child B” have been selected (with the checkmarkin the adjacent box) for the curfew setting “Sleep,” and “Parent C” and“Me” (e.g., both parents) have been selected to be in “Dinner” curfewmode (e.g., to prevent a subset of service plan activities during dinnertime).

FIG. 59 illustrates representative screen 9040, which illustratesexemplary information that may be presented on a device to a masteruser, in accordance with some embodiments, when a master user attemptsto manage a curfew with time events of a first set of one or moredevices from a device group (e.g., “Child Device C”) and one or moreusers (e.g., “Child A” and “Child B”) associated with a second set ofone or more devices from a device group. In the embodiment illustratedin FIG. 59, the master user manages a curfew for a combination of userand device entities and includes curfew selections and time events,which were discussed in detail in explaining previous figures.

FIG. 60 illustrates representative screen 9042, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to managethe curfew “Dinner” selection. In some embodiments, the curfew “Dinner”selection is pre-configured. In some embodiments, the curfew “Dinner”selection is pre-configured by a device agent (e.g., an OS function,service processor, app, mobile operator app, third-party app, etc.). Insome embodiments, the curfew “Dinner” selection is pre-configured by anetwork element. In some embodiments, the curfew “Dinner” selection ispre-configured by a third-party provider of the curfew service. In someembodiments, the curfew “Dinner” selection may be modified or customizedby a master user. In some embodiments, the curfew “Dinner” selection maybe modified or customized by a master user on a master device. In someembodiments, the curfew “Dinner” selection may be modified or customizedby a master user on a second device (e.g., a child device (such asdevice 100B)—for example, after presenting master credentials).

In the illustration of FIG. 60, the service activities restrictionsassociated with the curfew “Dinner” selection allow “Family” calls(“Calls (in/out)” set to “Family”), no browsing, no email, no texting,no apps (e.g., by “Browsing” set to “None,” “Email” set to “None,”“Texting” set to “None,” and “Apps” set to “None”). In some embodiments,additional activities may be listed or some activities may not belisted. In some embodiments, the master user can modify or customizeonly a subset of the activities (e.g., a master user may not be allowedto prevent an emergency communication—for example, a 911 call)associated with a curfew selection (e.g., a master user may not beallowed to set calls to “None”). In some embodiments, the pre-configuredselections or master user modifications may be different for in-bound orout-bound communications (e.g., allow the device to send texts, but notto receive texts). In some embodiments, the modifications to a pre-setcurfew take effect after the “OK” input is selected. In someembodiments, the modifications to pre-set curfew take effect inreal-time after the “OK” input is selected. In some embodiments, the“OK” selection could be alternatively or in addition represented by anequivalent term, such as one or more of: “Accept,” “Yes,” “Start,”“Curfew Now,” “Curfew Start,” “Time-out,” “Time-out Now,” etc. In someembodiments, the pre-set modifications could remain unchanged byselecting the “Cancel” input (or some other equivalent message, such as“NO,” “OFF,” “Stop,” or “Reject”). In some embodiments, the device couldbe modified back to its original settings with a “Reset” selection.

FIG. 61 illustrates representative screen 9044, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to managethe curfew “Sleeping” selection. In some embodiments, the curfew“Sleeping” selection is pre-configured. In some embodiments, the curfew“Sleeping” selection may be modified or customized by a master user. Inthe illustration of FIG. 61, the service activities restrictionsassociated with the curfew “Dinner” selection allow “Emergency” calls(“Calls (in/out)” set to “Emergency”), no browsing, no email, notexting, no apps (e.g., by “Browsing” set to “None,” “Email” set to“None,” “Texting” set to “None,” and “Apps” set to “None”).

FIG. 62 illustrates representative screen 9046, illustrating exemplaryinformation that may be presented on the master device, in accordancewith some embodiments, when a subscriber attempts to manage the curfew“Homework” selection. In some embodiments, the curfew selection (e.g.,“Homework”) is pre-configured. In some embodiments, the curfew selectioncomprises additional settings (or alternatively referenced herein asselections or options). In some embodiments, the additional settingscomprise service activity statistics. In some embodiments, theadditional settings comprise one or more of: a number, a maximum number,a number per unit of time, amount, maximum amount, amount per unit oftime, accounting, accounting per unit of time, etc., of serviceactivity. In the illustration of FIG. 62, the “Call statistics”drop-down menu presents a selection comprising: number of calls (“1,”“5”), number of calls per unit of time (two calls per hour or “2/hr”),or unlimited calls. In some embodiments, a user (e.g., a master user)may input a statistic (e.g., by text or voice input—for example, a unit,a unit and a time, a unit per unit of time, etc.) instead of or inaddition to a list of pre-set choices of statistics. In someembodiments, a user may select a percentage of service usage (e.g., thedevice “Apps” may not be used more than 10% of the time) or a percentageper unit of time. For example, in the embodiment illustrated by FIG. 62,“Apps statistics” of “10%/hr” could restrict apps usage to no more than6 min of each hour, which could be a moving/sliding window orsynchronized to the 24 hour clock hour or half-hours, etc.

In some embodiments, a curfew selection may manage new (or alternativelyun-initiated, future, or un-started) service activities. For example, acurfew selection may manage calls, texts, or browsing that may beattempted or desired at a future time after the curfew has been set(e.g., a real-time curfew selection). In some embodiments, a curfewselection may manage ongoing (or alternatively in progress or initiated,or started) service activities. For example, a curfew selection maymanage calls, texts, browsing, app or usage that may be ongoing prior towhen the curfew has been set (e.g., a real-time curfew selection after achild device has initiated a phone call or is in the middle of using anapp or playing a game). In some embodiments, it may be desirable toselect (e.g., from a list of preset or custom settings) managementactions to be taken on ongoing activities. In some embodiments, managingan ongoing activity may include one or more of: locking the device,pausing the device, powering down the device, disabling a UI of thedevice, terminating a service activity, or providing a notification tobe presented to a user regarding the ongoing service activity. In someembodiments, managing an ongoing activity may include a plurality ofactivities, such as presenting a notification to a user of a childdevice followed by pausing/terminating the service activity. In someembodiments, the pausing/terminating is delayed relative to thenotification.

FIG. 63 illustrates representative screen 9048, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to managethe curfew “Homework ongoing activity termination details” selection. Inthe embodiment illustrated in FIG. 63, the service activity “Calls”includes a menu pull-down with the selections “Terminate” (e.g.,real-time termination without Notification), “Notify” (e.g., notify theuser of the device to be curfewed that the service activity “Calls” isnot included in the curfew mode “Homework,” “Notify, terminate in 3 min”(e.g., send/present a notification to the device under curfew inreal-time and terminate the call three minutes later), or “None” (e.g.,ongoing calls are not managed). In the illustration of FIG. 63, theservice activity “Browsing” includes a menu pull-down with theselections “Lock screen” (e.g., real-time device screen lock withoutNotification), “Notify” (e.g., notify the user of the device to becurfewed that the browsing is not included in the curfew mode“Homework,” or “None” (e.g., ongoing browsing is not managed).

In some embodiments, a user (e.g., a master user) may select commonmanagement actions for several activities (e.g., for faster enforcement,to save setting time or simplify selections). In the illustration ofFIG. 63, the activities “Apps” and “Email” have both been selected (asshown by checked adjacent boxes) and a common management action (e.g.,“Notify, pause in 3 min”) has been selected for both apps and emailongoing activities. In some embodiments, more, less or all activitiescould be selected to share a management action for ongoing activitytermination.

In some embodiments, a user (e.g., a master user) may define a custom(or alternatively, or in addition, a new) curfew management mode, forexample to complement one or more preset curfew management modes. FIG.64 illustrates a representative screen 9050, which illustrates exemplaryinformation that may be presented on the master device, in accordancewith some embodiments, when a subscriber attempts to define a customcurfew mode. In the illustration of FIG. 64, a user interacting with themaster device (e.g., a master user) may specify a custom name. In theillustration of FIG. 64, the custom curfew mode is called “Driving”(e.g., input by text, voice, touch keypad, etc.). In the illustration ofFIG. 64, the master device selections have been set as following (asindicated by the bold text, but could be alternatively represented withitalics, larger font, different font, different shading, etc.): “Call”option selected is “Emergency,” which could indicate that only emergencycalls are allowed while in “Driving” curfew mode; “Browsing,” “Texting,”and “Apps” option selected is “None,” which could indicate that nobrowsing, texting, or app usage is allowed while driving.

In some embodiments a user of one or more devices of the device group(e.g., a master user of the master device) may provide additional (oralternatively referred to within as advanced or enhanced) curfewsettings. In some embodiments, the additional curfew setting compriseone or more of: locations included or excluded (or alternatively calledallowed or disallowed; or whitelisted or blacklisted), location changes(or alternatively or in addition: location variation, change oflocation, speed, velocity, location positioning, etc.) included orexcluded, device state included or excluded, network state (e.g.,networks available, quality of network connection, cost of networkusage, state of service plan, etc.) included or excluded, deviceconnectivity state (e.g., which of the one or more modems are enabled ordisabled).

FIG. 65 illustrates representative screen 9052, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to manageadvanced custom settings. In the illustration of FIG. 65, an examplelist of included and excluded states (or alternatively or in additionparameters, characteristics) that may be relevant to the one or moredevices to be managed by a curfew are included. For example, “LocationExcluded” may allow the master user to specify which locations areexcluded from the “Driving” curfew mode, like being at “Home.”Alternatively being at a park or a school could be excluded.

In the embodiment illustrated in FIG. 65, the selection “Speed Excluded”may allow the master user to specify which speeds are excluded from the“Driving” curfew mode, like being at “<3 ml/hr” which may indicate thedevice is stationary or moving slowly, such as being walked with orjogged with. In the illustration of FIG. 65, the selection “Device StateIncluded” may allow the master user to specify which device state orstates (e.g., child device state or any device associated with aparticular child) are excluded from the “Driving” curfew mode, likebeing in “Hands Free” or “Bluetooth” or “Voice Activated” state (e.g.,these device states may be considered safe for making phone calls orreading/writing messages while in “Driving” mode). Alternatively, beingat a park or a school could be excluded. In some embodiments (e.g.,“Device State Included” from FIG. 65), more than one item may beselected (e.g., for joint management) for a givensetting/state/selection. In the illustration of FIG. 65, the selection“Network State Included” may allow the master user to specify whichaccess networks are included from the “Driving” curfew mode, like beingat “Wi-Fi” which may indicate the device is stationary or moving slowly(e.g., if the Wi-Fi access points don't allow for handoff), such asbeing walked with or jogged with. In the illustration of FIG. 65, forexample “Device Connect Included” may allow the master user to specifywhich modems are active/included from the “Driving” curfew mode, likebeing at “Wi-Fi” or “Airplane mode” (which could disable/power down allor most wireless modems and could prevent service activities—such aspush notification or email sound notification—which could be distractingin the “Driving” curfew mode).

In some embodiments, it may be advantageous to provide messages (alsoreferred to within as notifications) to a device (e.g., a child device)based on curfew management activities, events, etc., for presentation toa user interacting with the device under curfew. In some embodiments, itmay be advantageous for a user interacting with the device associatedwith a curfew to accept (also referred to within as acknowledge) a leasta portion of the notifications received. In some embodiments,notifications may be customized (or selected from a list of presetmessages) by a master user (e.g., at a master device) prior tocommunication to the device under curfew.

In some embodiments, the curfew is associated with a child user (or someother user of the device group or user group) and a curfew notification(or some other curfew management) could be communicated to one or moredevices associated with the child user (e.g., the child may be usingmore than one device, or may switch from a first device to a seconddevice during the curfew). In some embodiments, a notification ispresented at a curfew-managed device in real-time. In some embodiments,a notification is presented at a curfew-managed device at a later timebased on an event (e.g., a child device may not be in use at the timecurfew is initiated, but is attempted to be used at a later time duringthe curfew enforcement and the notification is presented at that time).

In some embodiments, the curfew is associated with a child user (or someother user associated with the device group or user group) and thecurfew management (e.g., control) could be associated to one or moredevices associated with the child user (e.g., the child may be usingmore than one device during the curfew, or may switch from a firstdevice to a second device during the curfew). In some embodiments, auser (e.g., a child user) interacts with different devices during thetime the curfew is in effect, and the curfew management is adapted basedon the user interactions with one or more of the different devices overtime.

In some embodiments, the curfew device group (or user group) is based ona service account (e.g., a wireless access account, a family shareaccount, a shared usage allocation account, a SMB account, an enterpriseaccount, etc.). In some embodiments, the curfew device group is based ona service plan (e.g., a wireless operator, service provider, mobilewireless operator, MVNO, etc.). In some embodiments, the curfew devicegroup is based on an access network (e.g., the devices associated with ahome WLAN). In some embodiments, a curfew device group is based on twoor more of: a service account, service plan, access network. In someembodiments, a curfew device group is based on a device agent (e.g., anOS function, service processor, app, mobile operator app, third-partyapp, etc.) on the device group. For example, the device agent could bean application that is installed on each device in the device group(e.g., with a special credential assigned to the device group) andoptionally at least one of the devices has an additional capabilitybased on the application that allows it to be the curfew manager. Insome embodiments, a first device of the curfew device group is part of afirst service account (or a first service plan, or a first mobileoperator, or a first service provider) and a second device of the curfewdevice group is part of a second service account (or a second serviceplan, a second mobile operator, or a second service provider). In someembodiments, a first device of the curfew device group is part of afirst service account (or a first service plan, or a first mobileoperator, or a first service provider) and a second device of the curfewdevice group is part of a second service account (or a second serviceplan, a second mobile operator, or a second service provider) and device100A and device 100B are associated to a device group based on a deviceagent (e.g., an application) or a website, portal or a third-partydevice group provider (not associated with the mobile operator, wirelessservice provider). In some embodiments, the curfew device group (or usergroup) is based on a common operating system (e.g., two or more devicesin the device group are based on Android, iOS, etc.), for exampleassisted by an OS function, service processor or application andoptionally a device group credential. In some embodiments, the masterdevice is not part of the device group and the master device manages thedevices (or users associated to devices) based on a website, portal or athird-party device group provider (e.g., not associated with the mobileoperator, wireless service provider). For example, the device group mayonly include child devices or devices associated to child users. In someembodiments, the device group is based on one or more credentials thatenable a master user (e.g., on a device with network access ordevice-to-device communication) to configure a device agent on thedevice under curfew.

In some embodiments, the curfew user group is based on a service account(e.g., a wireless access account, family share account, a shared usageallocation account, a SMB account, an enterprise account, etc.). In someembodiments, the curfew user group is based on a service plan (e.g., awireless operator, service provider, mobile wireless operator, MVNO,etc.). In some embodiments, the curfew user group is based on an accessnetwork (e.g., the users interacting with devices communicating with ahome WLAN). In some embodiments, a curfew user group is based on two ormore of: a service account, service plan, access network. In someembodiments, a curfew user group is based on a device agent on thedevice group. For example, the device agent could be an applicationinstalled on the device configured to obtain a user credentialassociated with the device group (e.g., with a special credentialassigned to the user group) and optionally at least one of the users hasadditional capabilities based on the user credential that allows him/herto be the curfew manager.

In some embodiments, a curfew group comprises a combination of one ormore devices and one or more users (e.g., a curfew group may comprise amaster device, two child devices, a master user, and a child user).

In some embodiments, curfew management and/or enforcement (e.g., acurfew control policy) is implemented (or is assisted by) at least inpart by one or more network elements or a network system (e.g., aservice controller or a DPI server inspecting data communicationsassociated with a device under curfew). In some embodiments, curfewmanagement (e.g., a curfew control policy) is implemented (or isassisted by) at least in part by a device under curfew (e.g., one ormore device agents such as an OS function, service processor, app,mobile operator app, third-party app, etc.). In some embodiments, curfewmanagement (e.g., a curfew control policy) is implemented (or isassisted by) at least in part by one or more network elements and atleast in part by a device under curfew. In some embodiments, a masteruser (e.g., from a master device) provides management information to anetwork element (e.g., via a website, portal, or entering informationinto a third-party server) for assistance in enforcing (e.g., control,monitoring, notification) the curfew. In some embodiments, a master user(e.g., from a master device) provides management information to anetwork element (e.g., via a website, portal, or entering informationinto a third-party server) which communicates with a device agent on thedevice under curfew for assistance in enforcing (e.g., controlling,monitoring, notifying) the curfew.

FIG. 66 illustrates representative screen 9054, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to managenotification settings. FIG. 67 illustrates representative screen 9056,which illustrates exemplary notification information that may bepresented on the child device, in accordance with some embodiments,after a master user has initiated a curfew (e.g., a real-time curfew)mode to manage notification settings. In the illustration of FIG. 66,the “Master Device Curfew Homework Notification” menu includesnotification management for six items. For example the “Header” itemcould provide overall curfew information, such as curfew mode name“Homework” and/or when the curfew will be enforced, such as immediately(also referred to herein or equivalently as real-time, quasi-real time,almost real-time, now, as soon as possible) “You are now in Homeworkmode” or with some delay relative to the current time (e.g., “You willbe in Homework mode in 5 min,” for example to provide some time to thechild user to manage the termination of ongoing activities or to preventthe child user from initiating new activities) or alternativelyproviding an absolute time (e.g., “Homework mode at Bpm”—not shown). Inthe illustration of FIG. 66, the master user may provide a custommessage by selecting “Select custom message” and inputting anotification such as, “Joey, please start working on your project” forthe “Homework” curfew mode (not shown). In the illustrations of FIG. 66and FIG. 67, a master user has selected the “You are now in Homeworkmode” notification, and the associated notification on the child deviceis “Child Device A: You are now in Homework mode.” In some embodiments,the message could have the child's name (e.g., for a more personalmessage and/or to save the master user the effort to determine whichdevice(s) a child is interacting with).

In the illustrations of FIG. 66 and FIG. 67, the “Calls (in/out)” mayinclude “Contact list only” and the associated message presented at thechild device is “Calls: Contact list only.”

In some embodiments, a user may provide input to manage a statisticassociated with the device activities (e.g., a time or usage limit, atime or usage maximum, a usage, a percentage of usage, or any priorparameter normalized per unit of time). In some embodiments, a user mayprovide input to manage a statistic associated with the deviceactivities and information associated with the statistic is shared witha device under curfew by a curfew notification.

In the illustrations of FIG. 66 and FIG. 67, a master user has selectedthe “Call statistics” item to be a “Max 10 min/hr” notification (whichis an example of time limit usage over a unit of time) and theassociated notification on the child device is “Calls: Maximum of 10 minper hour.” In the illustrations of FIG. 66 and FIG. 67, a master userhas selected the “Texting statistics” item to be a “Max 4/hr”notification and the associated notification on the child device is“Texting: Maximum of 4 texts per hour” (which is an example of a usageamount over a unit of time). In the illustration of FIG. 66 and FIG. 67,a master user has selected the “Apps statistics” item to be a “Max10%/hr” notification, and the associated notification on the childdevice is “Apps: Maximum of 6 min per hour” (which is an example of ausage percentage over a unit of time at the master device, which isconverted into time usage amount per unit of time for presentation atthe child device).

In some embodiments, additional (or alternatively or in additionenhanced or optional) curfew notification messages may be generated by amaster user/device and received by a child user/device. In someembodiments, curfew notification messages are associated withtermination of activities that were ongoing prior to a change of curfewmanagement (e.g., a real-time curfew management to enter “Dinner” modewhen a child device has an active app session).

FIG. 68 illustrates representative screen 9058, which illustratesexemplary notification information that may be presented on the childdevice, in accordance with some embodiments, after a master user hasinitiated (or changed) a curfew (e.g., a real-time curfew) mode tomanage notification settings for ongoing activities. In the illustrationof FIG. 68, “Child Device A: You are now in Homework mode” couldrepresent an overview/summary notification message. In the illustrationof FIG. 68, “Browsing: Any non-Educational sites will be disabled” couldnotify a user associated with the child device A that any ongoingbrowsing will be disabled (e.g., by redirecting to a particular page,such as a home page, disabling links from a current page, pausing videostreaming embedded in the page, etc.). In the illustration of FIG. 68,“Your currently open apps will be paused in 3 min,” could notify a userassociated with the child device A that any ongoing app activity (e.g.,playing a game or streaming a video) will be paused (e.g., othertermination choices could be exiting, quitting, freezing the appactivity).

In some embodiments, a user or device (e.g., a child or significantother, or a child device) under curfew or to be curfewed or to beoffered a curfew could be given an option to accept (alternativelyreferred to herein as an OK, ACK, acknowledge, Yes, etc.) thenotification (and alternatively or in addition accept managementassociated with the curfew notification) or request a change in thecurfew management. In some embodiments, the request for a change in thecurfew management may include requesting an extension prior to thecurfew taking effect (e.g., relative to a current time or real-timeenforcement). FIG. 69 illustrates representative screen 9060, whichillustrates exemplary notification information that may be presented onthe child device, in accordance with some embodiments, after a masteruser has initiated (or changed) a curfew (e.g., a real-time curfew) modeto provide a user a notification option to accept or request anextension of a real-time curfew. In some embodiments, the request for achange in the curfew management may include one or more of: decliningthe curfew (e.g., a significant other that will not accept a “Dinner”curfew mode to attend a work emergency); shortening or lengthening thecurfew (e.g., a child that has completed homework and would like toshorten or exit a “Homework” curfew mode); or changing one or moresettings of the curfew (e.g., a child that requires access to aneducational app required for a homework activity if the “Homework”curfew mode restricts app usage). In some embodiments, the request for achange of a curfew could be requested (e.g., assisted by one or more ofa device agent, curfew app, service provider app, settings menu) priorto the curfew taking effect. In some embodiments, the request for achange of a curfew could be requested while the curfew is active. Insome embodiments, the request for a change of a curfew requested by achild device or child user is communicated to a master user or masterdevice assisted with a notification message.

In some embodiments, a curfew service activity usage managementcharacteristic (e.g., a limit, a maximum amount, a maximum amount perunit of time, or a percentage) comprises aggregating the usage over aplurality of devices. In some embodiments, a user under curfew interactswith more than one device (e.g., a child table and a child smartphone)and a user (e.g., a child user) is managed based on the aggregated usage(e.g., a child having a five minute limit of app usage during a“Homework curfew” will not be allowed to play five minutes on asmartphone followed by another five minutes on a tablet). In someembodiments, the aggregation of usage over more than one device mayaccount for simultaneous usage during a curfew management. For example,if a child is allowed to have five minutes of audio streaming and fiveminutes of surfing during a “Homework” curfew, if the child's audiostreaming partially overlaps with the child's five minutes of surfing,at least a portion of the first or second five minute allocations may bereduced or not accounted for. In some embodiments, activities aregrouped (or alternatively or in addition classified, tiered, ranked,etc.) for assisting in managing a curfew. In some embodiments, aplurality of activities are grouped and a service usage managementcharacteristic is managed for the group of activities. For example, thethree service activities: apps/games, browsing and video streaming maybe grouped into the category “get a break” and a limit of usage may beapplied on the group (e.g., a maximum of 10 min/hr of activities fromthe “get a break” group during a “Homework” curfew mode, and theaggregate of apps/games, browsing and video streaming should be limitedto ten minutes of each hour—which may or may not include discounts foroverlapping activities).

In some embodiments, a master curfew management communication (e.g.,from a master device or based on information provided by a master useronto any device from the group) to a particular device or a deviceassociated with a particular user (e.g., a child device or a device achild user is engaging with) originates or terminates at a device agent(e.g., an app, OS function, service processor at the master device orchild device). In some embodiments, a master curfew managementcommunication comprises at least: control information, notificationinformation, and acknowledgement information. In some embodiments, amaster curfew management assists in providing a device agent (e.g., anapp) to particular device (e.g., a child device). In some embodiments, amaster curfew management communication from a device to a particulardevice or a device associated with a particular user is communicatedover a device-to-device link, such as near field communication (NFC), adhoc Wi-Fi, Bluetooth, Zigbee, etc. In some embodiments, a master curfewmanagement communication from a device to a particular device or adevice associated with a particular user is communicated over a localarea network (LAN), such as a wireless local area network (WLAN), Wi-Fi,etc. In some embodiments, a master curfew management communication froma device to a particular device or a device associated with a particularuser is communicated over a wide area network (WAN), such as WWAN,cellular, etc. In some embodiments, a master curfew managementcommunication from a device to a particular device or a deviceassociated with a particular user is communicated over a combination ofaccess networks (e.g., a master device communicating over Wi-Fi to aintermediate networking device communicating over a cellular network toa child wireless device). In some embodiments, a master curfewmanagement communication from a device to a particular device or adevice associated with a particular user is communicated over a limitedaccess network (e.g., the curfew control is only allowed in a home Wi-Finetwork).

Enhanced Protection

In some embodiments, a master user (alternatively or in addition denotedherein as a subscriber, a manager user, user group master, an owner oran account holder) manages (wherein manages comprises one or more ofsets, defines, controls, monitors, notifies, acknowledges) a protectionon at least a portion of a service plan (e.g., comprising one or moreservice activities, such as browsing, texting, email, video streaming,etc. or other activities associated with one or more devices and/or oneor more users (or subscribers) associated with the one or more devices,such as app/games usage) for one or more other devices associated with adevice group (wherein the device group may be defined by a service plan,a service account, a shared allocation group a device agent grouping,device pairing, etc.) or a user group or both a device group and usergroup. In some embodiments a master user manages a protection from amaster device. In some embodiments, a master user manages a protectionfrom a second device after sharing a master user credential. In someembodiments the master user manages a protection from a master deviceafter sharing a master user credential. In some embodiments, the masteruser manages a protection for a device associated with the master user,for example a master device. In some embodiments, the device group hasmore than one master user (e.g., both parents of a family plan). In someembodiments, the protection is based on the union of the more than onemaster user management. In some embodiments, the protection is based onthe latest master user management. In some embodiments, the plurality ofmaster users is grouped by a hierarchy or tiers, and the master usermanagement is based on the hierarchy (e.g., one parent may set aprotection and another parent may or may not be allowed to override it).In some embodiments, the protection is used to prevent a user of a usergroup (e.g., a child) from accessing inappropriate content (e.g., adultor violent content) or to prevent the user from establishing connections(e.g., phone/video conversations, exchanging texts, social networking)with inappropriate individuals.

In some embodiments, at least one of the embodiments described aboveassociated with a curfew may be applied to a protection. In someembodiments, at least one of the embodiments described above associatedwith curfew management may be applied to protection management. In someembodiments, at least one of the embodiments described above associatedwith applying/enforcing a curfew may be applied to applying/enforcing aprotection.

FIG. 70 illustrates representative screen 9062, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to manage aprotection setting of one or more devices and one or more users. Forexample, the “Master Device Protection settings” may be managed from amaster device. In some embodiments, a master user may arrive at the“Master Device Protection settings” from a device agent UI. In someembodiments, a master user may arrive at the “Master Device Protectionsettings” from the master device settings or an application on themaster device. In some embodiments, the “Master Device Protectionsettings” may be a website, portal, etc. In some embodiments, the“Master Device Protection settings” settings may be presented to themaster device from a network element. In the illustration of FIG. 70,the settings assists in managing three devices (“Child Device A,” “ChildDevice B,” and “Manager Device C”) and two users (“Child A” and “ChildB”). In the illustration of FIG. 70, each device (or each user) may bemanaged independently (e.g., by selecting a protection setting from adropdown menu). In the illustration of FIG. 70, the manager may selectone of the following options: “None” (which may be associated with noprotection), “PG 7” (shown in bold to indicate being currentlyselected), or “PG 12.” In the illustration of FIG. 70, the currentselection for “Child Device A” is “PG 7,” the current selection for“Child Device B” is “PG 12” (e.g., the child device B is associated withan older child than the child associated with child device A, or childdevice B is a shared device in a more prominent location for a parent tomonitor—such as a large TV), the current selection for “Master Device C”is “None,” the current selection for “Child A” is “PG 7,” the currentselection for “Child B” is “PG 12” (e.g., because Child B is older thanChild A and is granted permission to engage in more activities). In someembodiments, it may be more convenient for the protection manager toselect a common selection for all the devices by setting “Select AllDevices” (or alternatively “Select all Users”—for example, if the wholefamily is having or about to have dinner, a manager may select “Dinner”in the “Select All Devices” drop down). In some embodiments, a masteruser selection may take place real-time (or alternatively innear-real-time or quasi real-time). In some embodiments, real-timeincludes the actions associated with the master user management takingeffect within a few minutes of being set by the master user. In someembodiments, real-time includes the actions associated with the masteruser management taking effect in less than a minute after being set bythe master user. In some embodiments, real-time includes the actionsassociated with the master user management taking effect in less than afew seconds after being set by the master user. In some embodiments, themaster user selection takes place in real-time after the master userselects the “OK” button (e.g., through a touch screen, or a voicecommand). In some embodiments, alternatives to selecting the “OK” couldinclude one or more of: “On,” “Accept,” “Yes,” “Start,” “Protect,”“Protect Now,” “Protect Start,” “Monitor,” “Control Now.”

In some embodiments, the “Master Device Protection settings” menu (oralternatively presentation, display, screen, window, or portal, etc.)may be used by a master user to check the protection status of one ormore devices or one or more users. In some embodiments, the “MasterDevice Protection settings” presentation (or alternatively display,screen, window, or portal, etc.) may be used by a master user to changea previously selected protection status of one or more devices (or oneor more users). In some embodiments, the “Master Device Protectionsettings” presentation (or alternatively display, screen, window, orportal, etc.) may be used by a master user to end the protection statusof one or more devices or one or more users (e.g., by changing “ChildDevice A” or “Child A” from “PG 7” to “PG 12” and selecting “OK”).

FIG. 71 illustrates representative screen 9064, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to managethe protection “PG 7” selection. In some embodiments, the protection “PG7” selection is pre-configured. In some embodiments, the protection “PG7” selection is pre-configured by a device agent. In some embodiments,the protection “PG 7” selection is pre-configured by a network element.In some embodiments, the protection “PG 7” selection is pre-configuredby a third-party provider of the protection service. In someembodiments, the protection “PG 7” selection may be modified orcustomized by a master user. In some embodiments, the protection “PG 7”selection may be modified or customized by a master user on a masterdevice. In some embodiments, the protection “PG 7” selection may bemodified or customized by a master user on a second device (e.g., achild device—for example, after presenting master credentials).

In the illustration of FIG. 71, the service activities restrictionsassociated with the protection “PG 7” selection allow the recipient toreceive calls from numbers in the child contact list (e.g., the child'sfriends) and make calls based on the master contact list (e.g., to callthe parents/family or the master user/device) as illustrated by “Calls”set to “Child Contact list (in)” and “Master Contact list (out),”activity “Browsing” of both “Educational” and/or “PG 7” is allowed(e.g., could be an “and” or an “or” of these two elements), activity“Email” is allowed for an “Approved list” (e.g., could be a list definedby the master user), the activity “Texting” is allowed for a “Childcontact List” (e.g., the same list as the phone calls), and activity“Apps” is permitted for “PG 7” rated apps. In some embodiments,additional activities may be listed or some activities may not be listedfor protection management. In some embodiments, the master user canmodify or customize only a subset of the activities (e.g., a master usermay not be allowed to prevent an emergency communication such as a 911call) associated with a protection selection (e.g., a master user maynot be allowed to set calls to “None”). In some embodiments, thepre-configured selections or master user modifications may be differentfor in-bound or out-bound communications (e.g., allow the device to sendtexts, but not to receive texts). In some embodiments, the modificationsto a preset protection take into effect after the “OK” input isselected. In some embodiments the modifications to a preset protectiontake into effect in real-time after the “OK” input is selected. In someembodiments, the “OK” selection could be alternatively or in additionrepresented by an equivalent term, such as one or more of: “Accept,”“Yes,” “Agreed,” etc. In some embodiments, the preset modificationscould remain unchanged by selecting the “Cancel” input (or some otherequivalent message, such as “NO” or “Reject,” “OFF.” In someembodiments, the device can be modified back to it original settingswith a “Reset” selection.

In some embodiments, a protection management (e.g., a state or mode)could be based on time events, such as a start time, end time, orduration (e.g., similar to FIG. 55 but applied to protection). In someembodiments, a protection management could control a subset of users ordevices and apply a common state (e.g., similar to FIG. 56 or FIG. 58but applied to protection). In some embodiments, a protection managementcould include management of ongoing activities assisted by a terminationpolicy (e.g., similar to FIG. 63 but applied to protection). In someembodiments, a protection management comprises setting a customprotection setup (or alternatively called profiles) (e.g., similar toFIG. 64 but applied to protection). In some embodiments, the protectionmanagement comprises settings based on a location (e.g., home, work,school, park, road), a change of location (e.g., location trace orvelocity/speed), a time (e.g., a time of day, day of week), a devicestate (e.g., in standby, active, phone/data use, hands free, modems inuse, etc.), network state/type (home, roaming, cellular/Wi-Fi); forexample similar to FIG. 65 but applied to protection. In someembodiments, the protection management comprises a notification (e.g., anotification generated by a master device or selected/defined/customizedby a master user) by a master user and presented at a protected userdevice (e.g., at a child device being used by a child); for examplesimilar to FIG. 66, FIG. 67 and FIG. 68 but applied to protection. Insome embodiments, a user being protected may respond to a master userprotection notification by one or more of accepting, rejecting,requesting an extension/delay, requesting an exception, etc.; forexample, similar to FIG. 69 but applied to protection embodiments.

In some embodiments, a protection management comprises allowed (oralternatively or equivalently called whitelisted) activities and/ordisallowed (or alternatively or equivalently called blacklisted orblocked) activities. In some embodiments, a protection managementcomprises monitored activities.

In some embodiments, a protection management comprises detecting anactivity (e.g., a disallowed or monitored activity) and recording atleast a portion of the activity. In some embodiments, informationassociated with the at least a portion of the activity is communicatedwith a master user (e.g., over a master device, website, portal, etc.).In some embodiments, at least a portion of a call, a text, a website, astreaming audio/video, social networking update is shared by a childdevice (e.g., a child based activity) to a master user (e.g., via amaster device). In some embodiments, the master user may receive one ormore of an email, a text, an audio/video stream, or a push notificationcontaining information associated with the child device activity.

FIG. 72 illustrates representative screen 9066, which illustratesexemplary information that may be presented on the master device, inaccordance with some embodiments, when a subscriber attempts to manage(e.g., advanced details or fine granularity management) the protectionof a “Browsing” activity within the “PG 7” selection. In theillustration of FIG. 72, the “Browsing” activity comprises allowed,disallowed, and monitored activities. For example, “Browsing allowed”allows “Educational” and/or “PG 7” content, “Browsing disallowed” blocks“Adult” content, and “Browsing monitored” may monitor “News” websites.For example, a master user (e.g., on a master device) protectionmanagement may allow a child to access “News” websites on a childdevice, but would receive information associated with news websitesbeing accessed (e.g., by receiving occasional, frequent, periodic,real-time, or event-trigger-based screen shots, or URL or domain names,etc.). In some embodiments, a call/text associated with a monitoredcell/text list is stored (e.g., on the child device or a networkelement) and is shared with the master user (e.g., on master device,website, or portal). Similarly audio/video streaming, apps/games maystore at least a portion of the activity and share the stored activitywith the master user. In some embodiments, the at least a portion of theactivity is shared with the master user over a secure channel (e.g.,encrypted). In some embodiments, the at least a portion of the activityis compressed into local or network storage prior to sharing with themaster user.

In some embodiments, the protection device group is based on a serviceaccount (e.g., a wireless access account, family share account, a sharedusage allocation account, a SMB account, an enterprise account, etc.).In some embodiments, the protection device group is based on a serviceplan (e.g., a wireless operator, service provider, mobile wirelessoperator, MVNO, etc.). In some embodiments, the protection device groupis based on an access network (e.g., the devices associated with a homeWLAN). In some embodiments, a protection device group is based on two ormore of: a service account, service plan, or access network. In someembodiments, a protection device group is based on a device agent on thedevice group. For example, the device agent could be an applicationinstalled on each device in the device group (e.g., with a specialcredential assigned to the device group) and optionally at least one ofthe devices has additional capabilities based on the app that allows itto be the protection manager. In some embodiments, a first device of theprotection device group is part of a first service account (or a firstservice plan, or a first mobile operator, or a first service provider)and a second device of the protection device group is part of a secondservice account (or a second service plan, a second mobile operator, ora second service provider). In some embodiments, a first device of theprotection device group is part of a first service account (or a firstservice plan, or a first mobile operator, or a first service provider)and a second device of the protection device group is part of a secondservice account (or a second service plan, a second mobile operator, ora second service provider) and device 100A and device 100B areassociated with a device group based on a device agent (e.g., an app) ora website, portal, or a third-party device group provider (e.g., notassociated with the mobile operator or wireless service provider).

In some embodiments, the protection user group is based on a serviceaccount (e.g., a wireless access account, family share account, a sharedusage allocation account, a SMB account, an enterprise account, etc.).In some embodiments, the protection user group is based on a serviceplan (e.g., a wireless operator, service provider, mobile wirelessoperator, MVNO, etc.). In some embodiments, the protection user group isbased on an access network (e.g., the users interacting with devicescommunicating with a home WLAN). In some embodiments, a protection usergroup is based on two or more of: a service account, service plan, oraccess network. In some embodiments, protection user group is based on adevice agent on the device group. For example, the device agent could bean app installed on the device that is configured to obtain a usercredential associated with the device group (e.g., with a specialcredential assigned to the user group) and optionally at least one ofthe users has additional capabilities based on the user credential thatallows him/her to be the protection manager.

In some embodiments, a protection group comprises a combination of oneor more devices and one or more users (e.g., a protection group maycomprise a master device, two child devices, a master user, and a childuser).

In some embodiments, protection management and/or enforcement (e.g., aprotection control policy) is implemented (or is assisted by) at leastin part by one or more network elements or a network system (e.g., aservice controller or a DPI server inspecting data communicationsassociated with a device under protection). In some embodiments,protection management (e.g., a protection control policy) is implemented(or is assisted by) at least in part by a device under protection (e.g.,one or more device agents such as an OS function, service processor, oran app). In some embodiments, protection management (e.g., a protectioncontrol policy) is implemented (or is assisted by) at least in part byone or more network elements and at least in part by a device underprotection.

In some embodiments, a master protection management communication (e.g.,from a master device or based on information provided by a master useronto any device from the group) to a particular device or a deviceassociated with a particular user (e.g., a child device or a device achild user is using) originates or terminates at a device agent (e.g.,an app or OS function, service processor at the master device or childdevice). In some embodiments, a master protection managementcommunication comprises at least control information, notificationinformation, and acknowledgement information. In some embodiments, amaster protection management assists in providing a device agent (e.g.,an app) to a particular device (e.g., a child device). In someembodiments, a master protection management communication from a deviceto a particular device or a device associated with a particular user iscommunicated over a device-to-device link, such as a near fieldcommunication (NFC), ad hoc Wi-Fi, Bluetooth, Zigbee, etc. In someembodiments, a master protection management communication from a deviceto a particular device or a device associated with a particular user iscommunicated over a LAN, such as, WLAN, Wi-Fi, etc. In some embodiments,a master protection management communication from a device to aparticular device or a device associated with a particular user iscommunicated over a WAN, such as, WWAN, cellular, etc. In someembodiments, a master protection management communication from a deviceto a particular device or a device associated with a particular user iscommunicated over a combination of access networks (e.g., a masterdevice communicating over Wi-Fi to a intermediate networking devicecommunicating over a cellular network to a child wireless device). Insome embodiments, a master protection management communication from adevice to a particular device or a device associated with a particularuser is communicated over a limited access network (e.g., the protectioncontrol is only allowed in a home Wi-Fi network).

In some embodiments, the actions illustrated in one or more of FIGS. 54through 72 are achieved through one or more user interfaces (e.g., voicecommands or a combination of voice commands and text input, or a touchscreen).

Device Group Management and Service Activity Control

In some embodiments, a device group manager (or alternatively, a“master” user, an administrator, a service account owner, a serviceaccount manager, a user/subscriber having administrative privileges, auser group manager, a “parent” for a “family” plan, a corporate ITmanager for a corporate account, a service provider administrator)manages (defines, controls, administrates, etc.) a set of one or moreservice activity controls (e.g., restrictions, curfews) that apply to anindividual device, a device group, a subset of a device group, a set ofrelated devices, or a set of unrelated devices. In some embodiments, theservice activity controls apply to any service activity, to a specificset of service activities, or to a single service activity for a deviceto which the service plan controls are administered. In someembodiments, service activity controls are referred to as servicecontrols, device controls, service permissions, device permissions,curfews, service limits, service restrictions, or other equivalentterms. In some embodiments, permissions for a device or a user refers toproperties for administrative control for which the device is configuredor the user is assigned, and restrictions for a device or a user referto specific service activity controls that restrict use or access of oneor more service activities on the device or for the user when using adevice. In some embodiments, the device group manager creates the set ofone or more service activity controls to apply to any device within adevice group (or other set of devices). In some embodiments, through aservice design/management system, the device group manager configuresproperties of the service activity control. In some embodiments, thedevice group manager configures the service activity control through auser interface of a device belonging to the device group. In someembodiments, the device group manager configures the service activitycontrol through an application on the device connected to an applicationserver/portal located in a network system. In some embodiments, thedevice group manager configures the service activity control through aweb-based interface to a web server communicatively coupled to (or partof) a network system. In some embodiments, the device group managerconfigures the service activity control using one or more operatingsystem (OS) components resident on a device. In some embodiments, thedevice group manager configures service activity controls through a“master” device (or through any device while “logged in” as a “master”user to the device). In some embodiments, the device group managerconfigures service activity controls through a computing device separatefrom the device group, e.g., a personal computer, a tablet, a laptop, aterminal, etc.

In some embodiments, service activity control configurations are storedin a network-based service design/management system, in one or moredevices of the device group, or in a combination of a network-basedservice design/management system and one or more devices of the devicegroup. In some embodiments, service activity controls configured by thedevice group manager are stored in the network-based servicedesign/management system and “pushed” or “pulled” to individual devicesin the device group. In some embodiments, service activity controlsconfigured by the device group manager are stored in the “master” deviceand “pushed” or “pulled” to other devices in the device group from the“master” device, either directly device-to-device, or indirectly throughone or more network elements communicatively coupled between the“master” device and the “other” device. In some embodiments, serviceactivity controls are configured by a first device group manager for afirst device group and shared with a second device group manager for asecond device group. In some embodiments, a service design/managementsystem catalogs a set of pre-configured service activity controls. Insome embodiments, the service design/management system adds “userconfigured” service activity controls to the catalog of service activitycontrols, e.g., with permission (or in some embodiments withoutpermission) of the device group manager that configured the serviceactivity control. In some embodiments, through one or more UI screens ona device, the device group manager selects, configures, customizes, andapplies service activity controls to one or more devices. In someembodiments, the service design/management system provides all or partof information for the one or more UI screens. In some embodiments, theservice design/management system provides information for UI screensthat include a fully pre-configured service activity control, apartially pre-configured service activity control, or a “shell” for afully customizable service activity control. In some embodiments, a setof pre-configured service activity controls are presented to the devicegroup manager (e.g., through one or more UIs) organized according toproperties of what is controlled, when the controls apply,alphabetically, according to a service type, or according to another“categorization” of service activity control. In some embodiments, thedevice group manager selects one or more “named” pre-configured serviceactivity controls from a menu, list, drop down, array or otherpresentation of labels for the pre-configured service activity controlcatalog and applies the selected service activity controls to one ormore devices.

In some embodiments, a device group manager, a network managementsystem, and/or specific software/hardware elements on a device monitorsand verifies integrity of software components (e.g., operating systemelements, applications, etc.) for a device of a device group. In someembodiments, integrity of software and/or hardware settings for a deviceis checked, e.g., to determine whether one or more elements of thesoftware and/or hardware settings have been tampered with (hacked into,corrupted, or otherwise altered outside of permissions allowed for thedevice). In some embodiments, a “time” setting for a device is verifiedagainst a reference time (e.g., a network-based time) to verify thattime settings for the device are intact and correct. By verifyingsettings, the device group manager and/or service management systemensures (at least in part) that service activity controls that includetime-based restrictions are properly applied for the device. In someembodiments, one or more device settings are overridden by the devicegroup manager or the service management system to apply “correct”settings that correspond to service activity controls applied to thedevice. In some embodiments, service activity controls for applicationsare verified by the device group manager, the service management system,and/or by software/hardware elements on the device. In some embodiments,one or more application names and/or “security” certificates forapplications are verified against a reference list, set, or file (on thedevice, in the network, or in a combination thereof). In someembodiments, applications stored on a device (or in network-basedstorage, e.g., an application store or a cloud server) to which serviceactivity controls apply are periodically verified. In some embodiments,one or operating system components are checked to verify that theoperating system components have not been tampered with. In someembodiments, a service processor on a device is checked to verifyintegrity of the service processor. In some embodiments, servicepolicies (or portions thereof) stored on a device are verified. In someembodiments, the device group manager is provided access to devicehardware/software integrity information. In some embodiments, the devicegroup manager is alerted when integrity verification fails for one ormore software and/or hardware elements of a device in the device group.In some embodiments, a network system administrator is notified whenhardware and/or software integrity verification fails for a device. Insome embodiments, one or more device agents in the device verifiesintegrity of one or more applications or operating system components,e.g., using credentials and/or security certificates. In someembodiments, tampering of an operating system component is detected, andan indication of tampering is provided to a device user, a devicemanager, a device administrator, a device group manager or other entity.In some embodiments, a device is disabled when tampering is detected. Insome embodiments, a notification is provided to a device group managerindicating tampering of software/hardware of the device, and the devicegroup manager selects actions to take. In some embodiments, the devicegroup manager selects to restrict use of the device in response to thedetection of tampering.

In some embodiments, a device group manager sets one or morenotification alert limits for one or more devices in a device group. Insome embodiments, the device group manager receives notification alertsaccording to limits set by the device group manager and/or limitsautomatically configured for a service activity, and/or limits set by auser of a device in the device group. In some embodiments, the devicegroup manager sets limits for notifications that are presented to thedevice group manager and/or to a user of a device for a device in thedevice group. In some embodiments, a notification includes informationabout service usage for a particular service activity or set of serviceactivities, e.g., for service usage of a particular service typeaccording to a service plan. In some embodiments, service usage limitsare based on specific service usage amounts or percentages used during asubscription time period, e.g., a recurring allocation for a serviceplan pre-paid or post-paid for a regular time period. In someembodiments, service usage limits are based on specific service usageamounts or percentages remaining for an allocation during a subscriptiontime period. In some embodiments, the device group manager receivesnotifications according to service usage limits for an individualdevice, for a set of devices, and/or for all devices in a device group.In some embodiments, an individual service usage triggers a notificationalert to a user of a device and/or to the device group manager. In someembodiments, an aggregated service usage (e.g., for one or more devicesin a device group) triggers a notification alert to a user of a device,to a subset of devices in a device group, to all devices in a devicegroup, and/or to the device group manager. In some embodiments, anotification alert provided to the device group manager includes anoption to provide additional service usage allocation to a device, a setof devices, or the entire device group. In some embodiments, anotification alert provided to a user of a device includes an option torequest additional service usage allocation for the device. In someembodiments, the request for additional service usage allocation fromthe user of the device is provided to the device group manager. In someembodiments, the device group manager approves or denies the request foradditional service usage allocation to the requesting device/user. Insome embodiments, the device group manager approves a different serviceusage amount from an amount requested by the requesting device/user.

In some embodiments, a device group manager sets a service activitycontrol that restricts use of one or more particular applications orapplication types on a device. In some embodiments, an application isrestricted by blocking communication of the application to and/or from anetwork, e.g., a browser application can be “not connected” to thenetwork, even though a network can be available for communicationto/from the device, e.g., for another “allowed” application. In someembodiments, a service activity control restricts an application byblocking use of the application on a device, e.g., an application can berestricted from launching and operating on the device. In someembodiments, a service activity control restricts download and/or uploadof information for an application from a network. In some embodiments, aservice activity control restricts download of one or more applications.In some embodiments, a restricted (limited) use of an application isallowed by a service activity control. In some embodiments, a serviceactivity control restricts a service activity (e.g., use of anapplication) based on a particular time, e.g., always, during a specifictime period (day, date, time of day, type of day, etc.) In someembodiments, a service activity control restricts use of, connectionsfor, download of, or other uses of an application during a time periodspecified by a device group manager for a device, a group of devices, ofan entire device group.

In some embodiments, a device group manager, e.g., through use of a“master” device in cooperation with a network-based server, determinesone or more applications to which a service activity control applies. Insome embodiments, the device group manager selects applications to whichto apply service activity controls from a listing or by searching forone or more applications in an application store database, e.g., on anetwork-based server. In some embodiments, the device group manageridentifies applications for service activity control by reviewing a“backup” copy of applications for one or more devices of a device groupstored in a “cloud” based server. In some embodiments, the device groupmanager selects applications to which to apply service activity controlsby obtaining a listing or search results for applications downloaded toand/or resident on a device of a device group. In some embodiments, thedevice group manager verifies credentials for applications of a deviceof a device group. In some embodiments, the device group managerverifies integrity of software/hardware elements of a device in a devicegroup. In some embodiments, application restrictions are applied to“unverified” and/or “unverifiable” applications of a device in a devicegroup. In some embodiments, only “verified” applications (or specified“verified” applications) are allowed and other applications for a devicein a device group are blocked and/or otherwise restricted by one or moreservice activity controls defined by the device group manager. In someembodiments, a device group manager obtains information on verificationof credentials for one or more devices in a device group. In someembodiments, when credentials for a device in a device group are notverified or verifiable, one or more service activity controls areapplied to the device. In some embodiments, the device group managerobtains information on software/hardware integrity of software/hardwarefor one or more devices in a device group. In some embodiments, when theintegrity of software/hardware of a device in device group indicatescompromise, or otherwise when the device integrity is not confirmed, oneor more service activity controls are applied to the device in thedevice group.

In some embodiments, the device group manager, through a master device,or logged as a “master” user to a device, or through an interface to aservice management system (e.g., a website, application portal, orservice management server), is presented information for applicationsavailable in an application store. In some embodiments, the device groupmanager selects a set of applications from the application store towhich service activity controls for one or more devices in a devicegroup are applied. In some embodiments, the device group manageraccesses an application store, searches for one or more applications orsets of applications, and obtains a list of applications downloaded,accessed, or otherwise associated with one or more devices in a devicegroup. In some embodiments, a set of applications are automaticallypopulated in an interface screen presented to the device group manager,e.g., based on association with the device group or based on one or moresearch terms entered by the device group manager. In some embodiments,the device group manager accesses information for a set of applicationsdownloaded to, resident on, or accessible from a device in the devicegroup. In some embodiments, the device group manager obtains one or moresecurity certificates (or other secure forms of verification) for theone or more applications of the device in the device group. In someembodiments, the device group manager obtains the security certificatesfor the applications from an application store (or other network-basedserver) and compares the network security certificates to securitycertificates for the applications resident on (and/or obtained from) thedevice in the device group. In some embodiments, the device groupmanager verifies an application's identity and failing verificationapplies service activity controls to the application. In someembodiments, the device group manager selects an application from a menu(e.g., based on information obtained from an application store), obtainsan application security certificate from the application store, andsends the application security certificate to a device in the devicegroup (directly from the application store, or indirectly from theapplication store to a device used by the device group manager and thento the device in the device group). In some embodiments, the devicegroup manager obtains verification of the application from the device inthe device group based on use of the obtained security certificate. Insome embodiments, verification is performed by the device in the devicegroup, by a device used by the device group manager, by a network-basedverification system, or by a combination of these.

In some embodiments, the device group manager, through a master device,or logged as a “master” user to a device, or through an interface to aservice management system (e.g., a website, application portal, orservice management server), is presented information for applications ofanother device (e.g., a “secondary/child” device) in the device group.In some embodiments, the device group manager obtains information oncertificates for applications from the secondary device, from a“primary” device of the device group, or from a network-based servicemanagement system (or other network-based server/database). In someembodiments, a set of applications for a secondary device is presentedthrough a user interface to the device group manager, e.g., on a“primary” device or through another computing device connected to adevice service management system. In some embodiments, the set ofapplications presented represent a set of available applications todownload/install. In some embodiments, the set of applications presentedrepresent a set of downloaded and/or installed applications for thesecondary device. In some embodiments, the set of applications arepresented with display options to enable or disable the applications foruse on and/or download to and/or restrictions applied to the secondarydevice. In some embodiments, the device group manager applies serviceactivity controls to one or more applications in the set of applicationspresented through a user interface of a master device (or device onwhich the device group manager is “logged in.”) In some embodiments, aset of “pre-selections” for service activity control of the applicationsis presented to the device group manager. In some embodiments, the setof “pre-selections” include particular service activity control settingsto apply to one or more applications of the secondary device. In someembodiments, the set of “pre-selections” include a subset of theapplications of the secondary device to which to apply one or moreservice activity controls. In some embodiments, an allowed/enabled/whitelist of applications is presented to the device group manager. In someembodiments, the device group manager creates an allowed/enabled/whitelist of applications for the secondary device. In some embodiments, thedevice group manager from a device service management system obtainsrecommendations for service activity controls of applications. In someembodiments, the device group manager applies all or part of theobtained recommendations for service activity controls to one or moreapplications of the secondary device. In some embodiments, the devicegroup manager maintains control of a master white list for all devicesin a device group. In some embodiments, the device group managermaintains individual white lists for applications for each device in adevice group. In some embodiments, the device group manager transfers awhite list from one device in the device group to another device in thedevice group. In some embodiments, the device group manager obtainsrecommended white lists (e.g., based on age groups or othercategorizations) for users of secondary devices in the device group. Insome embodiments, the device group manager enforces service activitycontrols for applications on secondary devices by applying a white list(e.g., selected from the recommended white lists) to one or moresecondary devices in the device group. In some embodiments, onlyapplications on a white list are allowed/enabled on a secondary deviceand other applications are restricted/disabled on the secondary device.In some embodiments, applications on a white list are alwaysallowed/enabled irrespective of service activity controls applied toapplications or otherwise applied on the secondary device. In someembodiments, the device group manager obtains a list of applicationsresident on, downloaded to, accessible to, or otherwise operable on oneor more devices in the device group, e.g., on the master device, on asecondary device, on any device other than the master device, on anydevice with service management responsibilities for the device group, ona set of secondary devices in a device group. In some embodiments, thedevice group manager obtains information for applications, serviceactivity controls, and/or white lists for the set of devices in a devicegroup. In some embodiments, the device group manager defines anapplication group (a set of applications selected from those availableto, resident on or otherwise operable on one or more devices of a devicegroup). In some embodiments, the device group manager defines a serviceactivity control for the application group. In some embodiments, theservice activity control for the application group applies to one ormore specific applications in the application group. In someembodiments, the service activity control applies to one or more devicesin the device group that can use or attempt to one or more of theapplications in the application group. In some embodiments, the serviceactivity control is automatically applied to an application of anapplication group for any device (or for a specified set of devices) ofa device group. In some embodiments, the device group manager defines anapplication group and a service activity control for applications of theapplication group. In some embodiments, the device group manager appliesthe service activity control to devices in the device group, andapplications of the application group resident on the devicesautomatically are associated with the service activity control. In someembodiments, an application of the application group has a serviceactivity control automatically applied when downloaded to a device inthe device group. In some embodiments, one or more aspects of a serviceactivity control apply to all applications in an application group andone or more additional aspects of the service activity control applyindividually to different applications in an application group. In someembodiments, one or more aspects of a service activity control apply toall devices in a device group and one or more additional aspects of theservice activity control apply individually to different devices in thedevice group.

In some embodiments, the device group manager applies a service activitycontrol to disallow downloading of an application (or application group)from an application store for a device, a set of devices or an entiredevice group. In some embodiments, the device group manager applies aservice activity control to restrict permissions to download one or moreapplications from an application store to one or more devices of adevice group. In some embodiments, the application store maintainsinformation about devices in a device group and permissions to downloador otherwise access applications of the application store. In someembodiments, only a subset of applications available in an applicationstore are presented to a secondary device in a device group, the subsetof applications presented determined at least in part by a serviceactivity control and/or by an application group defined by a devicegroup manager. In some embodiments, the application store determinespermission to display, download, and/or access an application to asecondary device based on information supplied from a device groupmanager. In some embodiments, the application store determinespermission to display, download, and/or access one or more applicationsto a secondary device based on one or more policies, securitycertificates, credentials, security keys, or other secure informationprovided by the secondary device to the application store. In someembodiments, the application store requires presentation of a securitycertificate and/or a secure “log in” identity (or other permissioninformation) from a user of a secondary device in order to display,download or access one or more applications of the application store. Insome embodiments, a service activity control on the secondary devicerestricts the secondary device from downloading one or moreapplications. In some embodiments, the secondary device is restricted todownloading, launching, use of applications to a specific white list ofapplications provided by the device group manager. In some embodiments,the secondary device is restricted based on a service activity controlthat allows or disallows installing, launching and/or particular use ofone or more applications based on particular restrictions defined by thedevice group manager for a device group to which the secondary devicebelongs. In some embodiments, software/hardware on the secondary devicedisallows or allows downloading, installation, launching and/orexecution of applications based on one or more security certificates,security keys, application lists, a secure code, a hash signature, orother secure means. In some embodiments, a service activity controland/or integrity verification software/hardware on a device restrictsexecution of an application for a specific time period, for a recurringtime period, for an indefinite time period (approximately now untilotherwise changed), for a future time period, for specific days of theweek, for specific types of days, for specific dates, or forcombinations of these. In some embodiments, a service activity controlrestricts a network connection for one or more applications of a device.In some embodiments, network connection restrictions are implemented onthe device. In some embodiments, network connection restrictions areimplemented in one or more network elements. In some embodiments,network connection restrictions are implemented in a combination ofsoftware/hardware elements on the device and in one or more networkelements. In some embodiments, a service activity control allows ordisallows use of a device in its entirety. In some embodiments, aservice activity control allows or disallows a subset of capabilities ofa device. In some embodiments, time-based restrictions are combined withapplication-based restrictions on a device of a device group. In someembodiments, the device group manager defines one or more serviceactivity controls as a combination of time-based restrictions and/orapplication-based restrictions directly through a user interface of a“master” device and/or through an interface to a network-based servicemanagement system.

In some embodiments, a device group manager defines and/or obtains oneor more service activity controls, e.g., through an interface of adevice and/or through an interface to a service management system, for adevice group. In some embodiments, the device group manager defines ormodifies properties of the one or more service activity controls, e.g.,to what activity the service activity control applies, when the serviceactivity control applies, to what extent the service activity controlapplies, etc. In some embodiments, the device group manager selects froma set of service activity controls and a set of devices in a devicegroup to determine which service activity controls apply to whichdevices in the device group. In some embodiments, the device groupmanager associates one or more devices of the device group with one ormore specific service activity controls. In some embodiments, through auser interface, the device group manager selects from a display ofdevices and service activity controls and associates specific serviceactivity controls with specific devices of the device group. In someembodiments, the device group manager selects a specific device, asubset of devices, or all devices of a device group to which one or moreservice activity controls apply. In some embodiments, the device groupmanager defines a new device group (or a subset thereof) to which toapply service activity controls. In some embodiments, the device groupmanager applies service activity controls to an already defined devicegroup (or to a subset thereof). In some embodiments, through the userinterface, the device group manager obtains a display of devices of adevice group, a set of service activity controls, and/or a set ofservice plans applicable for the devices of the device group. In someembodiments, the device group manager is presented selection buttons toapply a specific service activity control to a device group, a device,or a subset of devices of a device group. In some embodiments, thedevice group manager is presented selected buttons to apply a set ofspecific service activity controls to the device group, the device, orto the subset of devices of the device group. In some embodiments, thedevices of a device group and a set of service activity controls arepresented in a matrix, a table, a set of drop down menus, a spreadsheet,a listing, or an otherwise navigable grouping. In some embodiments, thedevice group manager is presented a set of devices, e.g., listed in aheading column or row and a set of service activity controls, e.g.,listed in a corresponding heading row or column for a matrix/table. Insome embodiments, the device group manager selects to enable or disableapplication of a particular service activity control to a particulardevice by selecting a button in a matrix/table element that representsthe intersection of the particular service activity control with theparticular device. In some embodiments, a set of devices for a devicegroup and a set of service plans applicable to the devices in the devicegroup are presented in a table/matrix format, and the device groupmanager selects whether to apply one or more service activity controlsto particular combinations of service plans and devices in the devicegroup. In some embodiments, the device group manager applies serviceactivity controls to a particular service plan, a set of service plans,or to all service plans for a particular device. In some embodiments,the device group manager applies a particular service activity controlto a particular device, a set of devices, or to all devices in a devicegroup (the particular service activity control includes, in someembodiments, to which service plans the particular service activitycontrol applies). In some embodiments, the device group manager ispresented a set of service activity controls and a set of service plansfor a particular device in the device group. In some embodiments, thedevice group manager associates particular service activity controlswith particular service plans by selecting buttons (or other equivalentuser interface constructs) for the particular device. In someembodiments, the device group manager obtains information for a set ofservice plans operable on (and/or available to operate on) a particulardevice. In some embodiments, the device group manager applies serviceactivity controls to service plans for particular devices after theservice plan is associated with the particular device. (In someembodiments, the service plan is a shared service plan associated withmultiple devices in a device group.) In some embodiments, the devicegroup manager applies service activity controls to service plans beforethe service plan is associated with the particular device, e.g., througha service management system, and/or for a set of service plansassociated with at least one device in the device group, and/or for aset of service plans associated with a “master” device (and/or “master”user) of the device group. In some embodiments, the device group managerassigns service plan controls for different types of devices in a devicegroup (e.g., service plan controls vary for different devices dependingon where a device sits in a hierarchy of service control for a devicegroup.) In some embodiments, a parent/master/primary device/user (or aset of parent/master/primary devices/users) for a device group isassociated with a first set of service activity controls, and achild/slave/secondary device/user (or set of child/slave/secondarydevices/users) is associated with a second set of service activitycontrols. In some embodiments, a “new” or “added” primary device/userinherits the first set of service activity controls, while a “new” or“added” secondary device/user inherits the second set of serviceactivity controls automatically when added to the device group.

In some embodiments, a catalog or library of service activity controlsis maintained by and/or accessible to a device group manager in themaster device, in local storage associated with the master device, innetwork storage, or in a service management system. In some embodiments,a device group manager defines a second service activity control byselecting a first service activity control from the catalog of serviceactivity controls, modifying one or more properties of the first serviceactivity control, naming the modified first service activity control asthe second service activity control, and saving the second serviceactivity control to the catalog/library of service activity controls. Insome embodiments, a service activity control is a “named” objectresident on a device in a device group. In some embodiments, the serviceactivity control is enabled or disabled for a particular device in thedevice group. In some embodiments, the service activity control isassociated with a user of a user group and transfers to a device in useby the user. In some embodiments, one or more service activity controlsdefined for a device or set of devices in a device group is applied toanother device or set of devices in the device group. In someembodiments, a network-based service management system or device-basedservice management application provides one or more templates forservice activity control definition and management. In some embodiments,service activity control templates are provided to the device groupmanager, e.g., for particular time periods with pre-defined properties.In some embodiments, the device group manager subsequentlymodifies/adjusts properties of the service activity control template tocreate a new service activity control for the device group.

In some embodiments, the device group manager is presented a set ofdevices, e.g., in a list, drop down menu, array, matrix, table, or othernavigable set, with which to associate one or more service activitycontrols. In some embodiments, the device group manager selects a deviceto which to apply, define, or associate one or more service activitycontrols. In some embodiments, the device is represented through a userinterface as a selectable object (e.g., a button) and by selecting thedevice, the device group manager is presented a list of service activitycontrols to apply, define, or associate with the device. In someembodiments, the device group is presented a set of service activitycontrols, e.g., in a list, drop down menu, array, matrix, table, orother navigable set, with which to associate one or more devices in adevice group. In some embodiments, the device group manager selects aservice activity control to which to apply, define, or associate with adevice in a device group. In some embodiments, the service activitycontrol is represented through a user interface as a selectable object(e.g., a button) and by selecting the service activity control, thedevice group manager is presented a list of devices in the device groupwith which to apply, define, or associate the service activity control.In some embodiments, a set of devices of a device group and a set ofservice activity controls are presented in a table with selectableobjects to associate one or more particular service activity controlswith one or more devices of the device group.

In some embodiments, the device group manager obtains a set ofpre-defined service activity controls with properties for when theservice activity control applies (time period based) and what theservice activity controls (application, service activity, service typebased). In some embodiments, a service activity control includesrestrictions/limits on when the service activity is allowed/blocked,what service activities are allowed/blocked, an amount of allowedservice usage associated with particular service activities, or acombination of these properties. In some embodiments, the device groupmanager associates service activity controls listed through a userinterface to various devices in a device group, e.g., byselecting/checking devices of the device group to whicheach/one/several/all of the service activity controls applies. In someembodiments, a list of devices is presented through a user interface tothe device group manager in combination with a list of service activitycontrols and a set of “checked” boxes/buttons that indicate whichservice activity controls apply to which devices of a device group. Insome embodiments, the device group manager selects a box/button toenable/disable to particular service activity control association with aparticular device of a device group. In some embodiments, the devicegroup manager selects a particular service activity control, whichhighlights or otherwise indicates a list of devices of a device group towhich the service activity control applies or may be applied. In someembodiments, all devices, or a pre-defined subset of devices of a devicegroup, are associated with a service activity control based on a singlebutton/box selection (one-click association). In some embodiments, thedevice group manager selects a service activity control and then selectseach device to which to apply the service activity control. In someembodiments, the device group manager selects a device and then selectsone or more service activity controls to associate with the device.

In some embodiments, user interface constructs, as described herein andin other applications incorporated by reference herein, for associatingservice activity controls with devices of a device group also apply toassociating service plans with devices of a device group, e.g.,assigning and or sharing service plans between one or more devices in adevice group. In some embodiments, the device group manager selects anassociation of a device in a device group with a service plan in orderto share/assign the service plan with the device. In some embodiments, aset of devices in the device group and a set of service plans arepresented through a user interface (on a device or through a separatecomputing device/terminal) to the device group manager. In someembodiments, the device group manager selects a particular service planand then selects a set of devices of a device group with which toshare/assign the particular service plan. In some embodiments,relationships of devices in a device group and service plans for adevice group are represented by a matrix, table, or other navigablearray through a user interface to the device group manager. In someembodiments, information on service activity controls for service plansare also represented on the same display. In some embodiments, serviceusage allocations for a service plan are represented on the display. Insome embodiments, service usage allocation sharing/assignments todifferent devices of a device group (e.g., for a “shared” service planhaving an aggregate total allocation of service usage for the devicegroup) for a particular service plan is displayed. In some embodiments,the device group manager re-allocates service usage allocations for oneor more service plans through a user interface.

In some embodiments, a secondary device in a device group requests anallocation (or generically to “share”) a particular service plan. Insome embodiments, the device group manager receives a notification ofthe request from the secondary device (directly device-to-device orindirectly device-to-network element-to device). In some embodiments,the device group manager approves a request for sharing a service planwith the secondary device. In some embodiments, the device group managerapproves service plan sharing through a master device, while logged inas a master user on a device, or through a service management system. Insome embodiments, the device group manager receives or otherwise obtainsa notification that indicates a request from the secondary device toshare the particular service plan. In some embodiments, the notificationincludes an option to approve and/or an option to disapprove sharing theservice plan with the secondary device. In some embodiments, thenotification includes an option to modify the request to share theservice plan with the secondary device. In some embodiments, thenotification includes an option to approve select aspects of the requestto share a service plan with the secondary device. In some embodiments,the secondary device requests a first allocation for sharing of aservice plan, and the device group manager approves a second allocationfor sharing of the service plan, e.g., (an amount approved differs froman amount requested.)

In some embodiments, a device that is not associated with a device groupsends a request to “join” a device group. In some embodiments, a devicegroup manager approves requests of a device to “join” a device group. Insome embodiments, the device group manager applies a set of serviceactivity controls and/or a set of service plans to the new device thatjoins the device group. In some embodiments, a device group managersends in “invite” to another device to join the device to a devicegroup. In some embodiments, the new device approves joining the devicegroup, e.g., through a user interface on the secondary “new” deviceinvited to join the device group. In some embodiments, a device groupmanager invites a device to “share” an allocation of a service plan (orbe associated with a service plan). In some embodiments, a user of thesecondary device to which the invitation to share the allocation is sentapproves sharing the service plan. In some embodiments, a secondarydevice is associated with a first service plan, and subsequent tosharing a second service plan, e.g., in response to an invitation toshare the second service plan, the secondary device is associated withboth the first service plan and the second service plan. In someembodiments, the secondary device is associated with a first serviceplan, and subsequent to sharing a second service plan, the secondarydevice is associated with the second service plan and disassociated fromthe first service plan.

In some embodiments, a device group manager assigns and/or shares aservice plan with one or more other devices in a device group. In someembodiments, the device group manager is presented a set of serviceplans and a set of devices of a device group through a user interfaceand selects to which devices in the device group to share one or more ofthe service plans. In some embodiments, the device group manager sharesand/or assigns a service usage amount of a service plan to one or moredevices of a device group. In some embodiments, the service usage amountrefers to a quantifiable amount of service usage associated with anaspect of the service plan. In some embodiments, the service usageamount represents a time amount (e.g., minutes of voice service), a dataamount (e.g., megabytes of data usage), or a usage count (e.g., numberof messages in/out). In some embodiments, the device group managerassigns and/or shares a service usage “currency” with one or moredevices of a device group. In some embodiments, service usage “currency”refers to actual currency units (e.g., dollars) and/or virtual currencyunits (e.g., service credits). In some embodiments, service usage“currency” applies to particular service plans, particular applications,or particular service activities for the device in the device group. Insome embodiments, the device group manager assigns/shares a portion of aservice plan with another device in the device group. In someembodiments, a service plan includes a plurality of service activities,and the device group manager shares/assigns a subset of serviceactivities of the service plan with one or more devices of the devicegroup. In some embodiments, a service plan includes a plurality ofservice usage amounts for different service activities, and the devicegroup manager shares/assigns a subset of the service usage amounts forone or more of the different service activities of the service plan withone or more devices in the device group. In some embodiments, the devicegroup manager shares a combination of service plan service activities,service plan service usage amounts, and service usage “currency” withone or more devices of a device group. In some embodiments, the devicegroup manager shares/assigns a service usage amount for a particulartime period to a device in the device group. In some embodiments, thedevice group manager shares/assigns a service plan, a service usageamount, a service usage “currency,” or a combination of these to adevice outside of a device group. In some embodiments, the device groupmanager shares/assigns a portion of a “shared” service plan to a devicethat is not associated with the “shared” service plan. In someembodiments, the device group manager allows use of a portion of a“shared” service plan with a device that is not associated with the“shared” service plan or outside a device group managed by the devicegroup manager for a specific purpose and/or a specific time period. Insome embodiments, the device group manager shares a portion of a serviceplan, a service usage amount, a service usage “currency,” or acombination of these with a user of a device in the device group thatcan then use the “shared” service plan on a device that is notassociated with the device group.

In some embodiments, a device group manager of a device group defines anallowed/enabled/white list for a device in a device group, a subset ofdevices in the device group, or the entire device group. In someembodiments, the device group manager obtains a representativeallowed/enabled/white list from a service management system. In someembodiments, the device group manager obtains a particularallowed/enabled/white list from another device, e.g., in the devicegroup or from another device group. In some embodiments, the devicegroup manager modifies an obtained allowed/enabled/white list. In someembodiments, the allowed/enabled/white list applies to a set of contactsto and/or from which a device can communicate, e.g., using anapplication or other service capability of the device. In someembodiments, contacts include individuals, users, devices, user groups,device groups, or other sets of devices/users. In some embodiments, adevice number, a telephone number, an email address, a messagingidentifier, or other unique identifier by which the device cancommunicate using a voice, messaging, or data application specifies acontact. In some embodiments, the device group manager defines anallowed/enabled/white list of contacts for a device in a device group byselecting a particular set of contacts from a list of contacts availablein the device, in a service management system, in a master device,associated with the user of the device, or associated with a masteruser. In some embodiments, the device group manager selects one or morecontacts for an allowed/enabled/white list by entering information in asearch field through a user interface, e.g., on the device or through aseparate computing device. In some embodiments, a set of one or morecandidate contacts for the allowed/enabled/white list is presentedthrough the user interface dynamically as the device group managerenters information in the search field (e.g., automatically populatebased on a portion of a search string entered). In some embodiments, thedevice group manager selects one or more of the presented contacts toadd to the allowed/enabled/white list of contacts. In some embodiments,the device group manager defines the allowed/enabled/white list ofcontacts based on a set of contacts in the device, e.g., all contacts inthe device and/or a specific subset of contacts in the device. In someembodiments, the device group manager defines the allowed/enabled/whitelist of contacts based on a set of contacts in the master device, e.g.,all contacts in the master device or a set of contacts in the masterdevice. In some embodiments, the device group manager defines anallowed/enabled/white list of contacts by collecting a set of contactsfrom one or more devices in the device group. In some embodiments, thedevice group manager defines an allowed/enabled/white list of contactsby editing a collated set of contacts obtained from one or more devicesin the device group. In some embodiments, the device group managerenters one or more contacts directly to define the allowed/enabled/whitelist of contacts. In some embodiments, the device group managerretrieves one or more contacts for the allowed/enabled/white list from anetwork based system, e.g., from a “cloud-based” server. In someembodiments, a network-based service (cloud service) provides a set ofcontacts for an allowed/enabled/white list to the device group manager.In some embodiments, the device group manager edits the set of contactsobtained from the network-based service to define anallowed/enabled/white list for the device in the device group. In someembodiments, a set of emergency services contacts are automaticallyloaded to an allowed/enabled/white list for a device in the devicegroup. In some embodiments, a set of contacts for the device group(e.g., a family group, corporate group, user group) is automaticallyloaded to the allowed/enabled/white list for a device in the devicegroup. In some embodiments, a set of contacts included in anallowed/enabled/white list is automatically determined based on ageographic location and/or a network type and/or a specific networkand/or a set of network types/networks available for use by the device.In some embodiments, a set of contacts included in anallowed/enabled/white list is downloaded from a service managementsystem. In some embodiments, the device group manager specifies ageographic location or specific network for the device (e.g., for futuretravel) and obtains a set of contacts for the specified geographiclocation or specific network for the device. In some embodiments,contacts on an allowed/enabled/white list can be communicated withirrespective of service activity controls applied to one or more serviceplans of a device in the device group. In some embodiments, a subset ofservice activities available to a device in the device group isavailable for communication with contacts on an allowed/enabled/whitelist, e.g., voice communication only, messaging only, email only, etc.In some embodiments, a service plan control blocks a specific set ofservice activities but allows other service activities for contacts onan allowed/enabled/white list. In some embodiments, outgoing calls,messages, and/or emails are blocked for a device including members of anallowed/enabled/white list, while incoming calls, message, and/or emailsare allowed for the device. In some embodiments, incoming calls,messages, and/or emails are blocked for a device including members of anallowed/enabled/white list, while outgoing calls, message, and/or emailsare allowed for the device. In some embodiments, the device groupmanager defines a disallowed/disabled/black list of contacts with whichthe device is not able to communicate by voice, message, and/or email.In some embodiments, the device group manager is notified when a devicein the device group communicates with a contact that is not on anallowed/enabled/white list of contacts. In some embodiments,notifications are provided for voice, messaging, and/or email receivedby or transmitted from a device in the device group to a contact that isnot in the allowed/enabled/white list of contacts. In some embodiments,the device group manager obtains both a notification and at least aportion of a voice, message, or email communication received from ortransmitted to a contact that is not in the allowed/enabled/white listof contacts. In some embodiments, the device group manager obtains anotification of an attempted communication between a device in thedevice group and a contact that is not on an allowed/enabled/white listof contacts. In some embodiments, the device group manager controls oneor more subsequent actions possible from the device in response to thenotification. In some embodiments, the notification includes a requestfor approval from the device group manager for communication to thecontact that is not on the approved/enabled/white list. In someembodiments, the device group manager approves the communication inresponse to the notification, and the device subsequently isallowed/enabled to communicate with the contact that is not on theapproved/enabled/white list. In some embodiments, the device groupmanager restricts the available communication methods and/or times forcommunication with contacts that are not on the approved/enabled/whitelist. In some embodiments, the device group manager receives a portionof voice content for incoming or outgoing voice connections by a devicein the device group with a contact that is not on theapproved/enabled/white list. In some embodiments, the device groupmanager receives a portion of message content for incoming or outgoingmessage connections by a device in the device group with a contact thatis not on the approved/enabled/white list. In some embodiments, thedevice group manager receives a portion of email content for incoming oroutgoing communication by a device in the device group with a contactthat is not on the approved/enabled/white list.

In some embodiments, the device group manager applies service activitycontrols on a device through communication between an application on aprimary/master device and a device agent on a secondary/child device. Insome embodiments, the device group manager applies service activitycontrols on a device through communication between the application onthe primary/master device to a network element (e.g., a server) and thento a device agent on the secondary/child device. In some embodiments,the network element is a service controller. In some embodiments, thedevice group manager applies service activity controls on a devicethrough communication from an application on the primary/master deviceto a network-based server that controls service activities of thesecondary/child device using network resource management. In someembodiments, service activity controls are managed by a combination ofdevice-based controls and network-based controls. In some embodiments,the device group manager accesses in real time or near real time a stateof service activity control for one or more devices in a device group.In some embodiments, the device group manager obtains information aboutservice activity control settings using an application on theprimary/master device. In some embodiments, the device group managerobtains the information about service activity control settings from anetwork-based server.

In some embodiments, a device group manager (e.g., a user with deviceadministrative privileges) transfers a device from a first serviceaccount to a second service account through a user interface, e.g., on amaster device, logged in as a master user on a device, or through aninterface to a service management system. In some embodiments, thedevice group manager manages a device group that includes only onedevice (e.g., as an administrative user of a particular device.) In someembodiments, the device group manager transfers the device in a devicegroup to another device group. In some embodiments, the device groupmanager transfers the device an initial, temporary, or ambient servicesaccount to a subsequent, permanent, or particular services account. Insome embodiments, the device group manager transfers the device from apre-activation service account to a post-activation service account,e.g., as part of an activation process for the device. In someembodiments, a user of a device transfers a device from one serviceaccount to another service account. In some embodiments, through a userinterface of a device, the device is transferred from one serviceaccount to another service account. In some embodiments, during anactivation process, the device is transferred from a temporaryactivation account to a permanent service account. In some embodiments,the device is transferred from an individual service account to a sharedservice account (e.g., a service account associated with a devicegroup). In some embodiments, the device is transferred from anindividual service account to a family service account. In someembodiments, the device is transferred from a family service account toan individual service account. In some embodiments, the device istransferred from an individual service account to a corporate serviceaccount. In some embodiments, the device is transferred from a corporateservice account to an individual service account. In some embodiments,the device is transferred from a first service account to a secondservice account created directly from the device. In some embodiments,through a user interface of the device, the device is transferred fromone account to another account. In some embodiments, a new or differentservice account is created “on the fly” from the device, and the deviceis subsequently transferred from a temporary account (or from “noaccount”) to the created service account. In some embodiments, a devicegroup manager creates a service account through a master device, orlogged in as a master user or through a service management system inpreparation for transfer of one or more devices to the created serviceaccount. In some embodiments, the device group manager subsequentlyassociates one or more devices with the service account, e.g., directlythrough the interface of the devices being associated with the serviceaccount. In some embodiments, a service account is associated with oneor more service plans. In some embodiments, through a user interface ofa device (e.g., a master device or through a child device), a devicegroup manager (or a device user) transfers a device from one serviceplan to another service plan in a service account with which the deviceis associated. In some embodiments, a device group manager (or a deviceuser) transfers service plans between service accounts. In someembodiments, devices associated with service plans automaticallytransfer from one service account to another service accountaccompanying the transfer of service plans between service accounts. Insome embodiments, when a device transfers from one service account toanother service account, service plans associated with the device alsotransfer from the one service account to another service account.

In some embodiments, a device group manager defines a service activitycontrol for an application through a user interface of a first device,e.g., a first device of a device group. In some embodiments, a userinterface screen is displayed to the device group manager on device100A. In some embodiments, the user interface screen includes a field inwhich the device group manager enters (or searches for) an applicationidentifier. In some embodiments, the user interface screen includesoptions for a user preference associated with the service activitycontrol for the application. In some embodiments, an applicationcredential associated with the application identifier is determined,e.g., by device 100A, by a network system, or by a combination of device100A and a network system. In some embodiments, one or more serviceactivity control policy instructions for the application are determinedbased on the user preference. In some embodiments, the one or moreservice activity control policy instructions for the application aredetermined by device 100A, by a network system, or by a combination ofdevice 100A and a network system. In some embodiments, the applicationcredential and the one or more service activity control policyinstructions for the application are provided to a second device (e.g.,device 100B). In some embodiments, the application credential and theone or more service activity control policy instructions for theapplication are provided directly from device 100A to device 100B. Insome embodiments, a secure communication link is established betweendevice 100A and device 100B through which the application credential andthe one or more service activity control policy instructions arecommunicated between device 100A and device 100B. In some embodiments,the application credential and the one or more service activity controlpolicy instructions are communicated from device 100A to device 100Bthrough a network system. In some embodiments, device 100A communicateswith the network system over a secure communication link. In someembodiments, device 100B communicates with the network system over asecure communication link. In some embodiments, the network systemauthenticates device 100A and/or device 100B before, after, or inconjunction with establishing secure communication links to device 100Aand/or device 100B. In some embodiments, device 100B uses theapplication credential and the one or more service activity controlpolicy instructions to apply the defined service activity control to theapplication on device 100B. In some embodiments, device 100B determinesan attempt to download the application to device 100B. In someembodiments, device 100B determines the application is resident ondevice 100B. In some embodiments, device 100B determines the application(or a portion thereof) is installed on device 100B. In some embodiments,device 100B applies the service activity control for the application byenforcing at least a portion of the one or more service activity controlpolicy instructions. In some embodiments, device 100B blocks theapplication from downloading to device 100B. In some embodiments, device100B provides an indication to assist in presenting a notification tothe device group manager (e.g., on device 100A). In some embodiments,device 100B blocks the application from starting on device 100B. In someembodiments, device 100B blocks the application from starting on device100B during a particular time period. In some embodiments, device 100Bblocks the application from communicating outside of (and/or within)device 100B. In some embodiments, time-based blocking is applied usingthe at least a portion of the one or more service activity controlpolicy instructions. In some embodiments, indications to one or moreother devices, users, device group managers are generated in response todetermining an attempt to download, launch, use, or communicate with theapplication on device 100B.

In some embodiments, one or more service usage limits for a serviceactivity are defined by a user of a device, a device group manager for adevice, or by a system administrator. In some embodiments, a serviceusage limit defines a specific service usage amount for a particularuser and/or device. In some embodiments, a service usage limit defines aspecific service usage amount from a service usage allocation for thedevice, for a set of devices, for a device group, for a service plan, orfor a set of service plans. In some embodiments, a service usage limitdefines a percentage of an allocation of a service usage amount for adevice or set of devices. In some embodiments, a service usage limitapplies to a particular device in a device group. In some embodiments, aservice usage limit applies to a set of devices in a device group. Insome embodiments, a service usage limit applies to any device in adevice group. In some embodiments, a service usage limit applies to aparticular time period (e.g., a billing cycle) for a service plan, apart of a service plan, or a set of service plans. In some embodiments,a service usage limit determines a trigger for providing a notificationto a user of a device (or to another device or user, e.g., to a devicegroup manager). In some embodiments, a service controller, networksystem, service management system, service design center, or othercollection of network elements defines one or more service usage limits.In some embodiments, notifications are provided to a user and/or adevice through voice, text, messaging, email, or a combination of these.In some embodiments, a voice message is generated that provides anindication of a service usage (e.g., an absolute amount, relativeamount, percentage used, percentage remaining) In some embodiments, thevoice message is provided to a user of a device and/or to other devicesin a device group and/or to a device group manager. In some embodiments,the voice message is automatically presented (e.g., audibly presentedthrough a speaker of a device to a user of the device). In someembodiments, the voice message provides an audible indication of anamount of service usage consumed or an amount of service usageallocation remaining for a service plan or service allocation to a useror device.

In some embodiments, a device is configured to present a notification,alert, or other indication to a user of the device when an incomingcommunication is attempted, e.g., based on information supplied from anetwork system. In some embodiments, incoming communication includesvoice calls, text messages, chat sessions, video services, emailmessages, or other forms of voice, text, video, and/or datacommunications. In some embodiments, the device provides thenotification, alert, or other indication to inform the user of thedevice when an incoming communication is pending. In some embodiments,the device provides a notification message that requires a response fromthe user of the device before the incoming communication is received,completed, and/or connected. In some embodiments, the device provides anotification with options to allow the user to accept the incomingcommunication. In some embodiments, one or more notifications areprovided to the user in real time (or near real time). In someembodiments, a connection is established for the incoming communicationto the user of the device in response to an acceptance input receivedfrom the user of the device (e.g., through a user interface of thedevice.) In some embodiments, all or a portion of the incomingcommunication is stored for the user in advance of the acceptance of theincoming communication by the user of the device. In some embodiments,information is provided to the user to accept service terms andconditions before the incoming communication is received and/or acommunication session is initiated. In some embodiments, the deviceand/or a network system stores all or part of a voice, text, video,data, email or other form of communication for the incomingcommunication to deliver to the user of the device in response to anacceptance from the user of the device. In some embodiments, the deviceand/or a network system automatically provides at least a portion of theincoming communication to the user to provide additional information todetermine whether to accept the incoming communication. In someembodiments, the device and/or a network system provides at least aportion of the incoming communication to the user after acceptance bythe user. In some embodiments, the device and/or a network systeminitiates a communication to a sender of the incoming communication(e.g., calls back when a user accepts). In some embodiments, the deviceand/or a network system provides for storage and playback in real time,near real time, and/or “accelerated” time (i.e., “fast” playback) of atleast a portion of the incoming communication.

In some embodiments, a user of a device and/or a device group managermanages one or more aspects of service plans through a user interface ofthe device. In some embodiments, service usage amounts for service plansassociated with a device and/or a device group are displayed on a userinterface. In some embodiments, service usage amounts displayed arerefreshed at regular (or irregular) intervals. In some embodiments,service usage amounts displayed on a user interface are updated based onservice usage monitoring in the device, by a network system, or by acombination of the device and a network system. In some embodiments, aservice usage displayed on the user interface of the device is updatedin response to a user input. In some embodiments, service usageinformation is determined on the device and/or in a network and serviceusage updates are provided from the device to the network and/or fromthe network to the device to refresh display of service usageinformation for the device. In some embodiments, service plan statusinformation and/or service plan options are updated for the device. Insome embodiments, the device obtains service plan status updates and/orservice plan option updates from the network, e.g., in real time, inresponse to a user input, or through a background process. In someembodiments, service plan information for the device is updated when auser selects one or more buttons/icons on the user interface of thedevice. In some embodiments, updates for service usage and/or serviceplans are provided in the background so that service usage informationand/or service plan status and/or service plan options are up to datewhen a user selects to display information about a service plan. In someembodiments, service plan options (e.g., for alternative service plansor for service plans already subscribed to by the user) are updated inreal time, in near real time, and/or in the background so that a usercan be informed of service plan availability when a user selects one ormore buttons and/or icons on the user interface of the device. In someembodiments, service usage and/or service plan information is obtainedfrom a network and/or updated in response to a user input for any iconor button on a user interface of the device and before the user requestsinformation for service usage and/or service plans. In some embodiments,an indication is provided on the user interface when new information isavailable and/or has been obtained for one or more service plans of thedevice. In some embodiments, in response to a user input, a superset ofinformation that may be of interest to the user of the device isupdated. In some embodiments, a synchronization and/or update indicationis provided by a network element to the device, and the devicedetermines whether to obtain new service usage and/or service planinformation based at least in part on the synchronization and/or updateindication provided. In some embodiments, service usage updates and/orservice plan updates are obtained, pulled, pushed, or otherwise providedto the device as available. In some embodiments, service usage updatesand/or service plan updates are provided after a pre-determinedaccumulation of updates. In some embodiments, service usage updatesand/or service plan updates are provided based on a pre-determined timeinterval. In some embodiments, a user of the device provides a userpreference for service usage and/or service plan update frequency and/orcontent. In some embodiments, a device maintains a service selectionstatus version and synchronizes the service selection status versionwith information from a network element to determine what informationfor service usage and/or service plans requires updates and only updateincrementally what is required. In some embodiments, the device obtainsservice selection status version information from a network element. Insome embodiments, the device provides service selection status versioninformation to a network element. In some embodiments, the devicedetermines when service usage updates and/or service plan informationrequires updates. In some embodiments, a network element determines whenservice usage updates and/or service information requires updates. Insome embodiments, the device maintains a catalog of a subset of statuspossibilities for service usage and/or service plan information and onlyupdates the catalog. In some embodiments, a service plan lease isprovided when a user selects a service plan, e.g., through a userinterface of a device, and before a network system has confirmed theservice plan for the device (or for the user of the device). In someembodiments, a service plan lease provides for a temporary or limitedservice usage in advance of a selected service plan. In someembodiments, a user of a device is pre-approved for serviceauthorization and/or credit standing before, upon, or after selection ofa service plan. In some embodiments, a user service plan lease isrevoked when credit standing for the user is not approved, or whenconfiguration of a service plan for the device and/or for the user ofthe device cannot be completed.

In some embodiments, a network system analyzes service usage and/orservice plan records for a device, a user, a device group, or a usergroup and determines service plan recommendations. In some embodiments,the network system determines service plans that match auser/device/group's service usage history. In some embodiments, thenetwork system recommends one or more service plans to auser/device/group based on one or more service plan characteristics(e.g., features, performance, cost). In some embodiments, the networksystem determines service plans based on cost to the user, for a device,and/or for a device group. In some embodiments, the network systemdetermines service plans based on wholesale cost to provide the serviceto the user, to the device, and/or to the device group. In someembodiments, the network system provides service plan recommendationsfor current and/or future use by a user, device, and/or device group. Insome embodiments, the network system provides recommended service plansto the user, device, and/or device group, e.g., through a notification,alert, marketing interceptor, upsell, advertisement, or other means ofpresenting the service plan recommendations to the user/device/group.

Device Group Management and Service Activity Control User Interface

FIGS. 73 through 156 illustrate representative screen captures from adevice that implements at least some of the disclosures describedherein. In view of the disclosures herein and the material disclosed inthe applications incorporated by reference, a person having ordinaryskill in the art will appreciate that FIGS. 73 through 156 are largelyself-explanatory illustrations of many of the disclosures herein. It isto be appreciated that FIGS. 73 through 156 are from an exemplaryimplementation. FIGS. 73 through 156 and are not intended to belimiting.

FIG. 73 illustrates representative screen 9068, which illustrates anexemplary initial opening “start up” screen that provides forassociating device 100 with a service account. In some embodiments, oneor more options for a service account for device 100 are presentedthrough a display of device 100 to a user of device 100. In someembodiments, a displayed option includes establishing a new serviceaccount for device 100. In some embodiments, the user of device 100creates a new service account for device 100, e.g., as a service accountowner, directly by interfacing with device 100 through its display andentering information required to establish the new service account. Insome embodiments, at least a portion of the information used toestablish the service account is obtained by a network management systemfrom device 100. In some embodiments, at least a portion of theinformation used to establish the service account is obtained by thenetwork management system from one or more storage elements (e.g.,databases, servers) located in a wireless access network, core wirelessnetwork, or communicatively coupled to the wireless network. In someembodiments, the user of the mobile wireless device enters at least aportion of the information through a separate interface to a servicemanagement system, e.g., through a web-based interface to the servicemanagement system. In some embodiments, the user of the mobile wirelessdevice enters information using an application resident on device 100 orusing one or more operating system components executing on device 100.In some embodiments, the user of device 100 is required to enter one ormore credentials to identify the user and/or indicate authorization ofthe user to create the new service account. In some embodiments, adisplayed option of device 100 to the user of device 100 includesjoining device 100 to an existing service account. In some embodiments,the existing service account is an established service accountassociated with one or more additional devices. In some embodiments, theexisting service account is a service account associated with a devicegroup or user group. In some embodiments, the existing service accountis associated with one or more service plans, e.g., a “shared”family/corporate service plan. In some embodiments, a new serviceaccount and/or an existing service account are required to be associatedwith at least one recurring service plan. In some embodiments, the newservice account and/or the existing service account are not required tobe associated with any recurring service plans, e.g., using one-time,limited time, pre-paid, or other non-recurring service plans. In someembodiments, the existing service account is established at least inpart by a user, a sales associate, an account administrator, an originalequipment manufacturer, or a device distributor. In some embodiments,the user of device 100 provides additional information to completeestablishment of a partially entered existing service account.

FIGS. 74 and 75 illustrate representative screen from a device 100 userinterface. Screen 9070 does not include any user-entered information,whereas screen 9072 includes user-entered information. Screen 9070allows a user to enter information for an email account and an accountpassword, as shown in screen 9072. In some embodiments, the emailaccount address and/or the account password are used for authenticationof a user of device 100 and/or a service account owner. In someembodiments, the email address and password are used to authenticate theuser as authorized to add, change, delete or otherwise manage serviceplans associated with the service account (and/or other properties ofsoftware/hardware on the device for service management). In someembodiments, at least a portion of the information entered in thesescreens is used in combination with one or more additional credentialsto verify a user's authorization to use a device and/or manage serviceplans for the device.

FIG. 76 illustrates representative screen 9074, which allows a user ofdevice 100 to enter information to establish a new service account. Insome embodiments, the user provides a service account owner and/or userinformation. In some embodiments, a portion of the service accountinformation entered is used for credit verification of the serviceaccount owner and/or the user of device 100. In some embodiments,contact information is provided by the user of device 100, e.g.,including telephone numbers, names, email addresses, street addresses,messaging identifiers, or other forms of identification of the userand/or a service account owner.

FIG. 77 illustrates representative screen 9076, which allows a user toenter information for one or more security questions associated with theservice account, the user of device 100, and/or the service accountowner. In some embodiments, the user selects from a list, drop downmenu, array, or other display of representative security questions andprovides answers to the security questions through the user interface ofdevice 100. In some embodiments, one or more of the security questionsand answers are used in a challenge/query/response exchange to verifyand/or identify the user of the device. In some embodiments, thesecurity questions are used to access select levels of informationand/or control of service management for device 100.

FIG. 78 illustrates representative screen 9078, which allows a user ofdevice 100 to select a recurring service plan for device 100. In someembodiments, the user and/or service account owner selects a recurringservice plan for device 100 directly through the user interface ofdevice 100. In some embodiments, the recurring service plan includesmultiple service plan elements that provide different service types. Insome embodiments, the user of device 200 selects from a plurality ofrecurring service plans, each recurring service plan having a differentcombination of service plan elements and/or different service usageamounts for different service plan elements. In some embodiments, theuser of device 100 customizes a recurring service plan, e.g., byselecting the “customize” button/icon through the user interface andthen selecting additional information that customizes the recurringservice plan to include features required and/or requested by the userof device 100. In some embodiments, the recurring service plans arepresented and/or perused by the user through an easily navigable userinterface, e.g., by swiping a display or selecting one or more icons totraverse through an array of available recurring service plans.

FIG. 79 illustrates representative screen 9080, which allows a user toreview a recurring service plan selection of the user of device 100, therecurring service plan selected from the array of service planspresented to the user of device 100. In some embodiments, the selectedrecurring service plan is a “customized” service plan. In someembodiments, estimated cost information for the selected service plan ispresented to the user of device 100. In some embodiments, costinformation includes recurring costs, one-time costs, supplementalcosts/fees, or a combination of these. In some embodiments, the user ofdevice 100 can return to previous screens to select another service planand/or modify a service plan selection. In some embodiments, the user ofdevice 100 can proceed to “checkout” using the reviewed selectedrecurring service plan.

FIG. 80 illustrates representative screen 9082, which allows a user ofdevice 100 to enter payment information associated with the user, aservice account, a service account owner, a device, a device group, or auser group. In some embodiments, payment information is entered onetime. In some embodiments, payment information (or a portion thereof) isstored for future reference and/or purchases of service plans and/orother services through device 100. In some embodiments, paymentinformation is securely stored in device 100 and/or in one or morenetwork elements of a network system and/or in one or more associatedsecure databases for “credit.” In some embodiments, credit verificationof a user of device 100 or a service account owner uses at least aportion of the payment information provided.

FIG. 81 illustrates representative screen 9084, which confirms a serviceplan selection (and/or customization) and a payment selection for aservice plan. In some embodiments, a service plan is not applied to aservice account until a user or service account owner selectsconfirmation through the user interface of device 100.

FIG. 82 illustrates representative screen 9086, which informs the userof device 100 when at least a portion of an initialization process fordevice 100 is in progress. In some embodiments, a display of progress ofthe process is provided (e.g., a bar or other real time ornear-real-time indication).

FIG. 83 illustrates representative screen 9088, through which a user ofdevice 100 can specify a reference identifier (nickname) for device 100.In some embodiments, the user of device 100 also selects a “role” fordevice 100 (and/or a user of device 100). In some embodiments, an“administrator” role provides full device and service plan managementcapabilities. In some embodiments, a “user” role provides for limiteddevice and service plan management capabilities. In some embodiments,roles are associated with individual devices. In some embodiments, rolesare associated with individual users of devices. In some embodiments,roles are associated with groups of users.

FIG. 84 illustrates representative screen 9090, which allows a user toselect a phone number for device 100. In some embodiments, a “current”phone number is provided to the user (administrator) of device 100. Insome embodiments, the user (administrator) of device 100 selects frommultiple options for the phone number. In some embodiments, device 100keeps a current phone number, transfers a number from a differentdevice, or requests a new number for device 100. In some embodiments, anew number is at least partially based on information associated withdevice 100 and/or with a service account and/or with user/administratorinformation provided. In some embodiments, a user/administrator selectsa preferred area code for a new device number. In some embodiments, auser/administrator is provided a selection of recommended area codesbased at least in part on address information provided (e.g., for theservice account associated with device 100). In some embodiments, anarea code is automatically selected (and/or recommended) based on ageographic location of device 100. In some embodiments, an area code isautomatically selected (and/or recommended) based on one or moreavailable wireless networks.

FIG. 85 illustrates representative screen 9092, which allows a user toenter information to join device 100 to an existing service account. Insome embodiments, at least a portion of the information entered is usedto identify the existing service account. In some embodiments, at leasta portion of the information entered is used to verify a user of device100, an administrator for device 100, or a service account owner. Insome embodiments, at least a portion of the information is used by anetwork system to determine one or more service accounts to which device100 may be associated. In some embodiments, a user of device 100 obtainsand enters supplemental security information, e.g., retrieved from anetwork system through a separate and possibly secure connection.

FIG. 86 illustrates representative screen 9094, which allows the user toenter information to join device 100 to an existing service account.Screen 9094 includes an overlay keyboard through which to enter therequested information.

FIGS. 87 and 88 illustrate representative screens 9096 and 9098, whichprovide a user interface that presents multiple screens to indicateprogress of a process to join device 100 to an existing service account.In some embodiments, service plans and/or service plan configurationsand/or device settings are updated as part of joining device 100 to aservice account. In some embodiments, service account settings areprovided to device 100. In some embodiments, at least a portion ofservice plans, service policies, service rules, and/or service policyinstructions are provided to device 100.

FIGS. 89 through 93 illustrate representative screens 9100, 9102, 9104,9106, and 9108, which indicate progress of a process to prepare device100 for use with a wireless network. In some embodiments, the processincludes joining device 100 to a service account, establishing a newservice account, updating service plans, updating service settings,updating device settings, loading service policies, loading serviceplans, establishing network connections, or a combination of these.

FIG. 94 illustrates representative screen 9110, illustrating a device100 user interface that illustrates a “home” screen for device 100 whendevice 100 is authorized to operate over a wireless network. In someembodiments, the “home” screen includes multiple selectablebuttons/icons/partitions. In some embodiments, a user/administrator ofdevice 100 selects a button/icon/partition to access information, manageservices, manage devices, purchase services, review account information,or perform other service plan and device management functions.

FIG. 95 illustrates representative screen 9112, which providesinformation to the user of device 100 to assist in learning how to usethe device 100 user interface. In some embodiments, the “tip”information is provided based on a request from the user. In someembodiments, the “tip” information is provided based on a recent historyof user interaction through the user interface. In some embodiments, the“tip” information is provided based on a previously viewed screen (orset of screens).

FIG. 96 illustrates representative screen 9114, through which a user ofdevice 100 reviews profile information for a user (and/or anadministrator) of device 100. In some embodiments, profile informationand/or password information and/or other service account information,user information, or device information are modified through one or moreuser interface screens.

FIG. 97 illustrates representative screen 9116, which provides a listingof payment forms (e.g., credit cards) associated with a device, user,and/or service account. In some embodiments, additional payment formsare entered through one or more user interface screens. In someembodiments, stored payment information is updated and/or modifiedthrough one or more user interface screens.

FIG. 98 illustrates representative screen 9118, which summarizesinvoices provided for a device, user, and/or service account. In someembodiments, summary information is provided for a set of invoices. Insome embodiments, additional detailed information is provided for one ormore invoices in the set of invoices.

FIG. 99 illustrates representative screen 9120, which includes detailedinformation for a selected invoice.

FIG. 100 illustrates representative screen 9122, which assists a user ofdevice 100 to add an account associated with an “outside” vendor, e.g.,for a “third-party” service provider/partner, to device 100. In someembodiments, device 100, the user, an administrator, and/or the serviceaccount is associated with an additional “outside” account by enteringinformation through one or more user interface screens.

FIGS. 101 and 102 illustrate representative screens 9124 and 9126, whichallow a user to update and/or modify information for payment formsassociated with a service account, and service account profileinformation.

FIG. 103 illustrates representative screen 9128, which allows a user toreview and manage service plans associated with device 100. In someembodiments, a summary of service plans is provided. In someembodiments, summary information for a recurring service plan isprovided. In some embodiments, service usage amounts for service planelements of a service plan are provided. In some embodiments, the userof device 100 selects to view additional service usage amount details.In some embodiments, the user of device 100 selects to manage serviceplans and/or service plan elements. In some embodiments, the user ofdevice 100 selects to purchase additional service plans and/or serviceplan elements. In some embodiments, the user selects to change,substitute, modify, and/or customize a service plan or elements of aservice plan.

FIG. 104 illustrates representative screen 9130, which allows a user toselect a recurring service plan from an array of service plans. In someembodiments, the user of device 100 customizes the service plan. In someembodiments, a currently subscribed service plan is customized asindicated on screen 9130. In some embodiments, an option to customize acurrent service plan is provided through the user interface.

FIG. 105 illustrates representative screen 9132, through which a user ofdevice 100 can customize a service plan. In some embodiments, eachservice plan element of the service plan is customized, e.g., byselecting from multiple possible configurations through a displayed setof information. In some embodiments, a user selects to customize one ormore service plan elements of a “customized” service plan, e.g., byselecting service usage amounts for individual service plan elements. Insome embodiments, a user selects service usage amounts for voice,messaging, and data individually. In some embodiments, user interfacecomponents provide for an easily navigable selection of service planelements from an array of possible service usage amounts/values/costsfor each service plan element of a customized service plan.

FIG. 106 illustrates representative screen 9134, which allows a user toconfirm changes made to a customized service plan. As illustrated inFIG. 106, no particular changes have been selected by the user of thedevice. In some embodiments, changes to each service plan element areprovided. In some embodiments, individual service plan element serviceusage amounts and/or costs are provided.

FIG. 107 illustrates representative screen 9136, which allows a user ofdevice 100 to confirm changes to a customized service plan. Asillustrated in FIG. 107, changes to customize a service plan for eachservice plan element are provided. In some embodiments, service plancustomization takes place “immediately” upon confirmation by the user ofdevice 100. In some embodiments, differences in service usage amountsand/or service plan element costs are provided.

FIG. 108 illustrates representative screen 9138, which summarizesinformation for a service plan, including a summary of “consumption” ofindividual service usage amounts for each service plan element of theservice plan. In some embodiments, the user of device 100 selects abutton/icon to obtain additional detailed information for each serviceplan element, service usage amount, service usage history, etc.

FIG. 109 illustrates representative screen 9140, which providesadditional detailed information for a service plan element of a serviceplan. In some embodiments, detailed information provided includes aservice plan recurring time period, an indication of a current timewithin the recurring time period, a service usage amount, an amount ofservice usage consumed during the current time period, an amount ofservice usage remaining for consumption during the current time period,an indication of historical service usage for previous time periods, ora combination of these. In some embodiments, service usage consumptionis detailed according to service activities. In some embodiments,service usage consumption is detailed according to service activityclassifications and/or service types. In some embodiments, service usagetrends or service usage consumption rates are provided.

FIGS. 110 and 111 illustrate representative screens 9142 and 9144, whichprovide summarized information for a service plan and/or element of aservice plan. In some embodiments, the user accesses information for theservice plan and/or changes service plan elements. In some embodiments,summary information provided for the service plan includes a recurringtime period, a position within the recurring time period, a serviceusage amount, an amount of service usage consumed, a breakdown ofservice usage per device, a breakdown of service usage per serviceactivity, a breakdown of service usage per service type, a breakdown ofservice usage per service activity classification. In some embodiments,a user modifies a service plan by selecting a “change” button/icon andselecting changes to a service plan or service plan element.

FIG. 112 illustrates representative screen 9146, which providessummarized service usage for a service plan for a particular timeperiod. In some embodiments, service usage information displayed isorganized according to service plan element, service plan type, serviceplan elements, or service usage classification. In some embodiments,detailed information for individual service plan elements is accessed byselecting a “details” button/icon through the user interface of device100. In some embodiments, service usage amounts for each service elementof a service plan are provided. In some embodiments, service usageconsumption for each service element of a service plan are provided. Insome embodiments, graphical displays of service usage consumption and/orservice usage amounts remaining are provided for a service plan and/orfor individual service plan elements of a service plan.

FIG. 113 illustrates representative screen 9148, which summarizes a setof applications available for use on device 100. In some embodiments,the available applications are summarized according to a service type.In some embodiments, the available applications are summarized in alist, array, matrix or other display. In some embodiments, the deviceincludes multiple applications. In some embodiments, device 100 includesmultiple applications for a service type. In some embodiments, anapplication launches upon selection by the user of device 100 throughthe user interface of device 100.

FIG. 114 illustrates representative screen 9150, which enables a serviceplan of a service account to be shared with another device 100, e.g., adevice within a device group. In some embodiments, a device groupmanager or administrator of a service account controls sharing ofservice plans among devices 100 in a device group. In some embodiments,an identifier for a device and/or user is provided to indicate withwhich user/device the service plan (or service plan element) is shared.In some embodiments, the device group manager (and/or administrator)enables or disables sharing of a service plan or service plan elementwith another device/user by selecting a button/icon on the userinterface of a device. As illustrated in FIG. 114, a voice service plan(or service plan element) is shared with another device (as indicated bythe “ON” button/icon). In some embodiments, an amount of service usageof the service plan and/or service plan element shared is displayed. Insome embodiments, the device group manager (or administrator) selects anamount of service usage to share with the device. In some embodiments, adrop down menu is provided with recommended service usage amounts toshare. In some embodiments, a shared usage amount is an “absolute”amount of service usage. In some embodiments, a shared usage amount is a“percentage” amount of a service usage allocation for a service plan orservice plan element. As illustrated in FIG. 114, 75 minutes of a 150minute service usage allocation is shared with the device indicated. Insome embodiments, the device group manager (and/or administrator)modifies shared plan service usage through the user interface andconfirms changes to shared plans by selecting the “Apply” button/icon.

FIG. 115 illustrates representative screen 9152, which presents a set of“featured” service plans for review, selection, and/or purchase by auser of device 100.

FIG. 116 illustrates representative screen 9154, which presents summaryinformation for a particular service plan selected from the set offeatured service plans. In some embodiments, the service plan selectedis a recurring service plan. In some embodiments, the service planselected is a time-limited service plan. In some embodiments, theservice plan selected is a supplemental (add-on) service plan, e.g., tomodify an existing service plan. In some embodiments, a summary of theservice plan, the cost for the service plan, a service usage amount forthe service plan, a list of applications supported by the service plan,an option to purchase the service plan, or a combination of these arepresented through the user interface to the user of device 100. In someembodiments, a drop down menu is provided to select among severaloptions for the service plan. In some embodiments, the user confirmspurchase of the service plan by selecting a “Buy” button/icon throughthe user interface of device 100.

FIG. 117 illustrates representative screen 9156, which has an overlaythat presents several options for a service plan. In some embodiments,the user of device 100 purchases the service plan for a particulardevice. In some embodiments, the user of device 100 assigns the serviceplan (in part or in its entirety) to another device, e.g., to adifferent device within a device group. In some embodiments, the user ofdevice 100 shares the service plan with one or more other devices. Insome embodiments, sharing of the service plan includes sharing a serviceusage amount or percentage of service usage allocation with otherdevices, e.g., devices 100 of a device group. In some embodiments, auser with administrative privileges has authorization to purchase,assign, and/or share service plans, service plan elements, or portionsthereof. In some embodiments, a user without administrative privilegesrequests approval from a device group manager (or other user withadministrative privileges) to purchase, assign, and/or share a serviceplan or service plan element.

FIG. 118 illustrates representative screen 9158, which summarizes a setof devices 100 in a device group. In some embodiments, a listing ofdevices 100 in a device group includes a primary/master/parent device(e.g., Master Device 100A). In some embodiments, a listing of devices100 in a device group includes one or more secondary/slave/child devices(e.g., Secondary Device 100B). In some embodiments, an indication of adevice's status within a hierarchy of devices 100 of a device group isprovided. In some embodiments, privileges to manage service plans and/ordevices of a device group are indicated. In some embodiments,identifiers for devices 100 (and/or for users of devices 100) areprovided. In some embodiments, a user of device 100 selects a particulardevice within a listing to access additional information for theparticular device.

FIG. 119 illustrates representative screen 9160, which provides detailedinformation for a particular device. In some embodiments, a usermodifies the detailed information by selecting from one or morebuttons/icons through the user interface. In some embodiments, thedetailed information provides identifiers for the particular device. Insome embodiments, identifiers for the particular device may be changedby the user. In some embodiments, a level of permissions (administrativeprivileges or other characteristics of service plan and/or device and/ordevice group management) is indicated. In some embodiments, a user ofdevice 100 selects to change a permissions level for the particulardevice. In some embodiments, one or more service activity controls(e.g., access restrictions) are indicated for the particular device. Insome embodiments, service plan information is provided for theparticular device. In some embodiments, service activity controls areadded by selecting a button/icon through the interface. In someembodiments, service plan elements are changed by selecting abutton/icon through the interface.

FIG. 120 illustrates representative screen 9162, which has an overlaythat indicates permissions levels for the particular device. In someembodiments, permission levels include full control of a device and/or adevice group and/or a service plan for a device. In some embodiments,full control permissions level includes managing service plans for adevice. In some embodiments, full control permissions level includespurchasing service plans for a device. In some embodiments, full controlpermissions level includes manage devices 100 of a device group. In someembodiments, permission levels include a limited capability to purchaseservice plans, share service plans, assign service plans, mange serviceplans, modify service plans, or manage devices 100 of a device group. Insome embodiments, additional permission levels between “full control”and “no control” are provided (not illustrated). In some embodimentsdevices are assigned permissions control within a hierarchy of devicesfor a device group. In some embodiments, the user/administrator/devicegroup manager selects a permission level for a device 100 of a devicegroup.

FIGS. 121 and 122 illustrate representative screens 9164 and 9166, whichsummarize information for sharing service plans with a particulardevice. In some embodiments, as illustrated in FIG. 122, a user withadministrative privileges to share a service plan or service planelement selects one or more service plans or service plan elements. Insome embodiments, each service plan element or service plan issummarized on a display through the user interface of device 100. Insome embodiments, the user selects to enable or disable sharing or aservice plan or service plan element by selecting a button/icon (e.g.,the “ON” button/icon). In some embodiments, the user selects an amountof service usage to share with the particular device. In someembodiments, the amount of service usage is provided in a drop downmenu. In some embodiments, a service usage amount of a service plan toshare is an absolute service usage amount or quantity (e.g., number ofminutes of voice, number of messages, amount of data in KB/MB/GB). Insome embodiments, a service usage amount of a service plan to share is apercentage amount of a service usage allocation for the service plan.FIG. 121 illustrates an overlay screen with different service usagepercentages (and corresponding service usage amounts for thepercentages) from which the user can select to share the service plan.In some embodiments, the user configures service plan sharing forindividual service plans and service plan elements through the userinterface and confirms the sharing selection by selecting the “Apply”button/icon.

FIG. 123 illustrates representative screen 9168, which providesinformation on service activity controls (e.g., access restrictions) fora selected device (“Johnny”). In some embodiments, one or more serviceactivity controls are applied to a selected device. In some embodiments,individual service activity controls are managed by selecting abutton/icon through the user interface of device 100. In someembodiments, the selected device is a device in a device group managedby a user with administrative privileges for the device group. In someembodiments, the selected device is the user's device (i.e., device100). In some embodiments, the selected device is a device other thanthe user's device. In some embodiments, the service activity controlsapply to one or more devices 100 in a device group. In some embodiments,the device group manager (or administrator) manages service activitycontrols for multiple devices 100 simultaneously. In some embodiments, aset of service activity controls apply to multiple devices 100, withconfigurations for the individual service activity controls customizedto each device. In some embodiments, a service activity control isdefined for a device, a set of devices, a device group, a set of devicetypes, a set of devices having a permission level, a set of devicesgrouped together in a hierarchy of devices, or other device collection.In some embodiments, each service activity control can be enabled ordisabled for each device (or for a set of devices). In some embodiments,each service activity control can be modified for each device (or for aset of devices). As illustrated in FIG. 123, a number of serviceactivity controls apply to a device, with some service activity controlsenabled (“ON”) and some service activity controls disabled (“OFF”).

FIG. 124 illustrates representative screen 9170, which enables a user tomodify a particular service activity control (access restriction) for aselected device (or a selected set of devices). In some embodiments, auser with administrative privileges (device group manager,administrator) renames the service activity control. In someembodiments, the administrator selects through the user interface ofdevice 100 properties of the service activity control. In someembodiments, the administrator selects “what” the service activitycontrol restricts. In some embodiments, the service activity controlapplies to particular service plans. In some embodiments, the serviceactivity control applies to service types. In some embodiments, theservice activity control applies to particular applications (or sets ofapplications). In some embodiments, the service activity control appliesto network access (internet access). In some embodiments, theadministrator selects to restrict incoming and/or outgoing communication(talk, text, messaging, video, chat, email, etc.) for the selecteddevice (or selected set of devices) using the service activity control.In some embodiments, the administrator selects to restrictionapplication usage and/or Internet access for the selected device (orselected set of devices). In some embodiments, the administrator selects“when” the service activity control applies. In some embodiments, a dropdown menu (or other user interface construct) is presented for differenttime periods. In some embodiments, the administrator selects acustomized time period for when the service activity control applies. Insome embodiments, the administrator selects days of the week and timeperiods within days of the week to which the service activity controlapplies. In some embodiments, the administrator selects days of theweek, and time periods that overlap different days of the week to whichthe service activity control applies. FIG. 124 illustrates a serviceactivity control entitled “Curfew Now!” that applies for all days andall times. In some embodiments, when the “Curfew Now!” service activitycontrol is applied for a device, restrictions imposed by the serviceactivity control apply continuously once enabled until the serviceactivity control is disabled.

FIG. 125 illustrates representative screen 9170, which allows a user tomodify a service activity control (access restriction) for a selecteddevice (or a selected set of devices). In some embodiments, anadministrator defines a “School Time” service activity control to applyfor weekdays (Monday to Friday) during school hours (e.g., 8:00 AM to3:00 PM). In some embodiments, the “School Time” service activitycontrol restricts use of the selected device (or selected set ofdevices) for one or more services. In some embodiments, communicationto/from the selected device (or selected set of devices) is limited bythe service activity control during the specified time periods. In someembodiments access to applications and/or networks is limited during thespecified time periods. In some embodiments, a drop down menu provides apredefined time period for the service activity control (e.g., “SchoolDays”). In some embodiments, the predefined time period automaticallypopulates the time controls with a particular setting. In someembodiments, the administrator overrides the default time controlsettings to “customize” the settings for “School Days”.

FIG. 126 illustrates representative screen 9174, which allows a user tomodify a service activity control (access restriction) for a selecteddevice (or a selected set of devices). In some embodiments, anadministrator defines a “Bed Time” service activity control to apply fornights that precede weekdays. In some embodiments, the “Bed Time”service activity control restricts use of the selected device (orselected set of devices) for one or more services. In some embodiments,communication to/from the selected device (or selected set of devices)is limited by the service activity control during the specified timeperiods. In some embodiments access to applications and/or networks islimited during the specified time periods. In some embodiments, a dropdown menu provides a predefined time period for the service activitycontrol (e.g., “School Nights”). In some embodiments, the predefinedtime period automatically populates the time controls with a particularsetting. In some embodiments, the administrator overrides the defaulttime control settings to “customize” the settings for “School Nights.”As illustrated in FIG. 126, in some embodiments, time periods begin onone day and end on another day.

FIG. 127 illustrates representative screen 9176, which allows a user todefine a service activity control (access restriction) for a selecteddevice (or a selected set of devices). In some embodiments, anadministrator defines a “My Restriction” service activity control toapply for a specified time period and to a set of particular services.In some embodiments, communication services are restricted. In someembodiments, application use on the selected device (or selected set ofdevices) is restricted. In some embodiments, network access by theselected device (or selected set of devices) is restricted. In someembodiments, customized service activity controls are saved on theselected device (or selected set of devices), on another device in adevice group, in a network element, or a combination of these. In someembodiments, the administrator loads one or more customized serviceactivity controls to one or more devices 100 in a device group.

FIG. 128 illustrates representative screen 9178, which allows a user todefine exceptions that override a service activity control (or a set ofservice activity controls). In some embodiments, the exception providesfor communication by the selected device (or selected set of devices) toand/or from other devices, users, individuals, groups, etc. In someembodiments, a default exception is “no exception.” In some embodiments,the administrator selects a set of users (people) with which theselected device (or selected set of devices) can communicate to overridea service activity control. In some embodiments, the administratorselects a set of people in a contact list (on the selected device (orselected set of devices), on another device, for a device group, orobtained from a network element.) In some embodiments, the administratordefines a specific set of people to which the selected device (orselected set of devices) can communicate to override the serviceactivity control.

FIG. 129 illustrates representative screen 9180, which allows a user todefine a set of specific people to allow as an exception forcommunication that overrides one or more service activity controls. Insome embodiments, the administrator selects specific people by selectinga button/icon through the user interface. In some embodiments, theadministrator selects a pre-defined (or previously defined) list ofspecific people to populate the restriction exception. In someembodiments, the administrator access a contact list of the selecteddevice (or selected set of devices), a contact list of another device ina device group, a contact list for a device group, or a network-basedcontact list to select individuals to include in the exception list.

FIG. 130 illustrates representative screen 9182, which allows a user toselect an individual from a contact list to include in a restrictionexception list that overrides a service activity control. In someembodiments, the administrator searches for contacts within a contactlist by entering information in a search field of the user interface. Insome embodiments, the administrator searches by contact name and/or bycontact identifier and/or by contact number. In some embodiments, theadministrator selects one or more communication service types permittedfor the individual, e.g., “allow” incoming and/or outgoing voiceconnections, “allow” incoming and/or outgoing messaging connections, or“allow” incoming and/or outgoing emails.

FIG. 131 illustrates representative screen 9184, which allows a user tosearch for contacts within a contact list to define or modify arestriction exception list.

FIG. 132 illustrates representative screen 9186, in which a particularcontact (“Adam”) is selected from the contact list and populated withinthe allowed list for restriction exceptions. In some embodiments, bydefault an added contact is provided full communication access. In someembodiments, by default an added contact is provided no communicationaccess, and the administrator selects to “allow” particularcommunications with the added contact.

FIG. 133 illustrates representative screen 9188, which allows a user todefine allowed exceptions that include specific individuals. In someembodiments, a listing of specific people with which the allowedexception to the service activity control applies is displayed. In someembodiments, an indication of types of communication permitted with theallowed exception individual is displayed (e.g., phone, text messaging).In some embodiments, individuals in the exception list are selected bythe administrator and properties of the “allowed exceptions” for theselected individual are modified by the administrator (e.g., using theuser interface (or similar user interface) as illustrated in FIG. 132).

FIG. 134 illustrates representative screen 9190, which allows a user todefine an “allowed exception” list for a service activity control(access restriction). In some embodiments, the administrator selects toallow all individuals of a contact list. In some embodiments, theadministrator selects a subset of individuals on a contact list (notshown). In some embodiments, the administrator selects types ofcommunication allowed as an exception to the service activity controlto/from individuals in the contact list. In some embodiments, all (orsome) of the contacts in the contact list are allowed to contact thedevice/user to which the service activity control exception applies. Insome embodiments, anyone in the contact list is allowed to call thedevice/user. In some embodiments, anyone in the contact list is allowedto send text messages to the device/user. In some embodiments, theuser/device is allowed to call anyone in the contact list. In someembodiments, the user/device is allowed to text message anyone in thecontact list.

FIG. 135 illustrates representative screen 9192, which allows a user toselect a pre-defined time period for a service activity control. In someembodiments, the administrator selects from the list of pre-defined timeperiods to apply to a service activity control for a selected device. Insome embodiments, the administrator customizes time periods to apply toa service activity control. In some embodiments, the definitions of thepre-defined time periods are modifiable by the administrator through theuser interface of device 100.

FIG. 136 illustrates representative screen 9194, which allows a user toselect an initial time period value or an ending time period value for aservice activity control. In some embodiments, the administrator selectsone or more time periods for a particular day, set of days, overlappingdays, non-overlapping days, or all days of a week (or other grouping ofdays). In some embodiments, multiple time periods of a day are definedfor a service activity control (e.g., early morning and late evening).

FIG. 137 illustrates representative screen 9196, which allows a user tomodify a service activity control (access restriction) for a selecteddevice (or a selected set of devices). In some embodiments, anadministrator defines a “Weekend Time” service activity control to applyfor weekend days (Saturday and Sunday) during all hours (e.g., 12:00 AMto 12:00 AM). In some embodiments, the “Weekend Time” service activitycontrol restricts use of the selected device (or selected set ofdevices) for one or more services. In some embodiments, communicationto/from the selected device (or selected set of devices) is limited bythe service activity control during the specified time periods. In someembodiments access to applications and/or networks is limited during thespecified time periods. In some embodiments, a drop down menu provides apredefined time period for the service activity control (e.g., “AllWeekend”). In some embodiments, the predefined time period automaticallypopulates the time controls with a particular setting. In someembodiments, the administrator overrides the default time controlsettings to “customize” the settings for “All Weekend”.

FIG. 138 illustrates representative screen 9198, which allows a user tomodify a service activity control (access restriction) for a selecteddevice (or a selected set of devices). In some embodiments, anadministrator defines a “Dinner Time” service activity control to applyfor weekdays (Monday through Friday) during particular defined hours(e.g., 5:30 PM to 6:30 PM). In some embodiments, the “Dinner Time”service activity control restricts use of the selected device (orselected set of devices) for one or more services. In some embodiments,communication to/from the selected device (or selected set of devices)is limited by the service activity control during the specified timeperiods. In some embodiments access to applications and/or networks islimited during the specified time periods. In some embodiments, a dropdown menu provides a predefined time period for the service activitycontrol (e.g., “Early Evening”). In some embodiments, the predefinedtime period automatically populates the time controls with a particularsetting. In some embodiments, the administrator overrides the defaulttime control settings to “customize” the settings for “Early Evening”.In some embodiments, the administrator defines a “custom” time period byselecting a “custom” drop down option for the “When to restrict” setting(not shown). In some embodiments, the administrator defines a “custom”time period using a set of selectable sliders (e.g., a bar display oftime with arrow indicators for start and stop times).

FIG. 139 illustrates representative screen 9200, which includes anoverlay that summarizes a service activity control (access restriction)defined by the administrator. In some embodiments, one or properties ofthe service activity control are summarized in the overlay screen. Insome embodiments, the administrator approves the definition of theservice activity control by selecting a button/icon. In someembodiments, the administrator does not approve the definition of theservice activity control by selecting a different button/icon. In someembodiments, the administrator returns to editing the service activitycontrol and subsequently approves the edited service activity control.

FIG. 140 illustrates representative screen 9202, which provides a listof service activity controls (access restrictions) for a selecteddevice, including newly defined service activity controls included inthe list of service activity controls.

FIG. 141 illustrates representative screen 9204, which allows a user todefine an exception to a service activity control, the exceptionapplying to one or more particular applications available on a deviceand/or to one or more networks (or network types) available for theselected device (or selected set of devices) to communicate over. Insome embodiments, the “allowed exception” applies to a particularservice activity control, to a set of service activity controls or toall service activity controls for the selected device (or selected setof devices). In some embodiments, the “allowed exception” applies to aparticular device, to a set of devices, or to all devices of a devicegroup. In some embodiments, the “allowed exception” permits the selecteddevice (or selected set of devices) to communicate on a particular typeof network (e.g., a home mobile network, a Wi-Fi network, a “femtocell”network, a 3G/4G network, a roaming mobile network). In someembodiments, the “allowed exception” permits the selected device (orselected set of devices) to communicate on mobile wireless networks. Insome embodiments, the “allowed exception” permits the selected device(or selected set of devices) to communicate on Wi-Fi networks. In someembodiments, the administrator selects from a set of specific wirelessnetworks over which the selected device (or selected set of devices)communicates. In some embodiments, the administrator selects a specificset of service provides over which selected device (or selected set ofdevices) is permitted to communicate. In some embodiments, the “allowedexception” defines one or more specific applications (or applicationtypes) that are permitted by the allowed exception to the serviceactivity control (or set of service activity controls). In someembodiments, a list of applications available on the selected device (orselected set of devices) is provided to the administrator. In someembodiments, a superset list of applications for the selected device (orselected set of devices) is provided (e.g., including both applicationsinstalled on the selected device(s) and a set of applications that maybe installed on the selected device(s)). In some embodiments, theadministrator selects to allow particular applications from thedisplayed list. In some embodiments, software/hardware on the selecteddevice (or selected set of devices), in the network, or a combinationthereof, verifies one or more applications, e.g., using securecredentials or certificates. In some embodiments, only verifiedapplications can be “allowed.” In some embodiments, unverifiedapplications are tagged and/or indicated to the administrator.

In some embodiments, service activity controls (access restrictions)apply to particular network types (e.g., disallow communication forparticular times on particular networks). In some embodiments, serviceactivity controls restrict access to mobile wireless networks. In someembodiments, service activity controls restrict access to Wi-Fi wirelessnetworks. In some embodiments, service activity controls restrict basedon a combination of wireless network type, specific wireless networks,specific communication types, applications, application types,time-based restriction, etc.

FIGS. 142 through 148 illustrate representative screens 9206, 9208,9210, 9212, 9214, 9216, and 9218 for transferring a device number fromanother device to the particular device, e.g., as selected by anadministrator.

FIGS. 149 through 156 illustrate representative screens 9220, 9222,9224, 9226, 9228, 9230, 9232, and 9234, which present tutorialinformation to a user of device 100.

In some embodiments, a user interface presents one or more screensthrough which an administrator can select service plans (or elementsthereof) with one or more devices 100. In some embodiments, theadministrator selects a particular device from a listing of devices(e.g., of a device group) and then selects service plans to share withthe particular device. In some embodiments, the administrator selects aparticular service plan from a listing of service plans (e.g., for aparticular device) and then selects a particular device (or devices)with which to share the particular service plan. In some embodiments, auser interface presents a table or matrix of information thatillustrates sharing of service plans among a set of devices. In someembodiments, a user interface presents one or more screens through whichan administrator can select service activity controls (restrictions) toapply to one or more devices 100. In some embodiments, the administratorselects a particular device from a listing of devices (e.g., of a devicegroup) and then selects a service activity control (restriction) toapply to the particular device. In some embodiments, the administratorselects a service activity control (restriction) from a listing ofservice activity controls (restrictions) (e.g., defined for a devicegroup) and then selects a device (or devices) to which to apply theservice activity control (restriction). In some embodiments, a userinterface presents a table or matrix of information that illustratesapplications of service activity controls (restrictions) among a set ofdevices 100.

In some embodiments, application programming interfaces (APIs) areprovided through which devices 100 and/or network elements communicateinformation, e.g., within device 100, between device 100 and a networkelements, or between network elements of a network system. In someembodiments APIs are defined for providing service plan and devicemanagement. In some embodiments, APIs are defined to provide forobtaining, exchanging, modifying, and/or transferring credentialsto/from device 100. In some embodiments, APIs are defined to provide forexchanging credentials between device 100 and a website. In someembodiments, APIs are defined to provide for transferring credentialsbetween device 100 and one or more activation servers. In someembodiments, APIs are defined to provide for transferring credentialsbetween activation servers. In some embodiments, APIs are defined toallow for activating multiple devices 100. In some embodiments, APIs aredefined to allow for managing multiple devices 100, device groups, orother collections of devices 100. In some embodiments, APIs are definedfor managing quality of service features. In some embodiments, APIs aredefined for managing service plan offers. In some embodiments, APIs aredefined for managing sponsored service plans.

What is claimed is:
 1. A method of operating a master wireless deviceservice processor to manage service plan sharing, comprising: obtaining,from a master user, a device usage allocation applicable to two or morewireless devices, the two or more wireless devices associatedrespectively with respective ones of at least two different usersassociated with a service plan to which the master user subscribes;obtaining aggregate measures of device usage associated respectivelywith the at least two different users; performing a comparison of one ormore of the aggregate measures of device usage with a usage metric; andbased on the comparison, adjusting the device usage allocation.
 2. Themethod of claim 1, further comprising authenticating the master wirelessdevice based on a credential that identifies at least one of the masterwireless device or the master user.
 3. The method of claim 1, furthercomprising modifying the device usage allocation based on an input fromthe master user.
 4. The method of claim 3, further comprisingauthenticating the master user based on a credential that identifies themaster user.
 5. The method of claim 1, further comprising: obtaining amodification request from at least one device of the two or morewireless devices; and modifying the device usage allocation based on themodification request.
 6. The method of claim 5, further comprising:before modifying the device usage allocation based on the modificationrequest, obtaining, from the master user, permission to modify thedevice usage allocation based on the modification request.
 7. The methodof claim 1, wherein the device usage allocation identifies an amount oftime, an amount of data, a number of text messages, a number of voiceminutes, an application on at least one of the two or more devices, or acombination of these.
 8. The method of claim 1, wherein the comparisoncompares at least one of the aggregate measures of device usage to aparticular percentage or fraction of the device usage allocation.
 9. Themethod of claim 1, further comprising obtaining, from the master user,one or more parameters to assist in adjusting the device usageallocation.
 10. The method of claim 1, further comprising sending anotification regarding the adjustment to at least one of the two or moredevices, the notification for presentation through a user interface ofthe at least one of the two or more devices.
 11. The method of claim 1,wherein the master wireless device is not one of the two or morewireless devices.
 12. The method of claim 1, wherein one of thedifferent users is a first user, and wherein a particular device of thetwo or more wireless devices is also associated with a second user inaddition to being associated with the first user, and wherein the deviceusage allocation does not apply to the second user.
 13. The method ofclaim 1, wherein a first device of the two or more devices iscommunicatively coupled to a first network, and wherein a second deviceof the two or more devices is communicatively coupled to a secondnetwork.
 14. The method of claim 13, wherein the first network comprisesa cellular network, and the second network comprises a Wi-Fi network.15. The method of claim 13, wherein the first network comprises acellular network, and the second network comprises a local area network.16. The method of claim 1, wherein a first device of the two or moredevices is associated with a respective one of the different users basedat least in part on a credential obtained from that user.
 17. The methodof claim 1, wherein a first device of the two or more devices isassociated with a respective one of the different users based on aselection by the master user.
 18. The method of claim 1, wherein a firstdevice of the two or more devices is associated with a respective one ofthe different users based at least in part on a sensor signal thatidentifies the another user.
 19. The method of claim 1, wherein thedevice usage allocation indicates an amount of device usage time. 20.The method of claim 19, wherein the comparison comprises determiningwhether at least one of the aggregate measures of device usage isgreater than or equal to a particular percentage or fraction of theamount of device usage time.
 21. The method of claim 19, wherein thecomparison comprises determining whether at least one of the aggregatemeasures of device usage is greater than or equal to the amount ofdevice usage time.
 22. The method of claim 1, wherein the device usageallocation indicates an amount of wireless data allotted to betransmitted or received by the two or more wireless devices.
 23. Themethod of claim 22, wherein the comparison comprises determining whetherat least one of the aggregate measures of device usage is greater thanor equal to a particular percentage or fraction of the amount of dataallotted to be transmitted or received by the two or more devices. 24.The method of claim 22, wherein the comparison comprises determiningwhether at least one of the aggregate measures of device usage isgreater than or equal to the amount of data allotted to be transmittedor received by the two or more devices.
 25. The method of claim 1,wherein adjusting the device usage allocation comprises revoking anunused allocation for at least one of the at least two different users.